* pix normaly needs registered IP addresses at the outside interface for proper operation and future options like VPN.
(It can work behind another NAT but you'll have problems with VPN ,multimedia or other apps).
* As far as I remember, if you use NAT & PAT together, the PAT address should be the lowest, i.e.:
global (outside) 1 10.10.2.2-10.10.2.254
global (outside) 1 10.10.2.1
* The netmask of the global IP addresses should be the same as the netmask for the outside interface and you can ommit it (will be added by the pix) in the GLOBAL configuration command.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.