Static translation netmask

[Guest_imported]

If I have a statement such as:-
static (inside,outside) 200.0.0.2 10.5.5.1 netmask 255.255.255.255 0 0
where the outside address is 200.0.0.2 and the inside address is 10.5.5.1 to which address does the netmask refer.
In the above example which is a 1:1 translation the 255.255.255.255 host netmask will apply to both addresses
BUT
Where a 1:many relationship exists such as:-
static (inside,outside) 200.0.0.2 10.5.5.0 netmask ??????
where the 10.5.5.0 address refers to a complete C class subnet, to which address is the netmask referring, and what would the netmask be. I get an error with netmasks other than 255.255.255.255.
The Cisco documentation is really confusing regarding this.
Many Thanks
Regards
Rob

 

[yizhar]

HI.

There is no 1:many relationship with pix static commands.

There are only options for 1:1 which is defined by a netmask of 255.255.255.255 (that can be ommited in the CLI when typing), or there is a many:many with other netmask like
static (inside,outside) 111.111.111.0 192.168.1.0 netmask 255.255.255.0
In that case there is exact same number of ip addresses in both ranges - 192.168.1.53 will map to 111.111.111.53 etc...

A mapping of 1:many can be created with dynamic NAT using the "nat" & "global" commands.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar