Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

PIX 501 6.3 No internet from server after Static NAT

Status
Not open for further replies.

nortelneo

IS-IT--Management
Feb 9, 2009
116
KW
Hi,
I have setup a PIX 501 in my lab, with a static nat to an internal test server. But I am unable to browse the internet from this server. I have removed the global (outside) interface and nat(inside)1 0 0 commands. I am not able to ping 4.2.2.2 from the server, but I can from the PIX. If i remove the static nat command and add the global and nat commands, I will be able to browse. What am I missing?
I have created access-lists as follows
ip address outside B.B.B.B 255.255.255.0
ip address inside A.A.A.A 255.255.255.0
access-list acl_out permit icmp any any echo-reply
access-list acl_out permit icmp any host A.A.A.A
access-list acl_in permit icmp host B.B.B.B any
access-list acl_in permit tcp any eq www
access-list acl_in permit tcp any any eq domain
access-list acl_in permit udp any any eq domain
access-list acl_in permit tcp any eq domain any
access-list acl_in permit udp any eq domain any
static(inside,outside) B.B.B.B A.A.A.a netmask 255.255.255.255 0 0
access-group acl_out in interface outside
access-group acl_in in interface inside

Thank you.Regards.






 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top