I have a question on PIX firewall as below:
There is a network 223.11.50.0 need to access to one host 10.80.0.1. I can use the global & nat command that allows the PAT mapping.
global (outside) 1 10.80.0.2 netmask 255.255.255.255
nat (inside) 1 223.11.50.0 255.255.255.0 0 0
However 2 pcs within the subnet need to identically map to 2 different global address:
223.11.50.55 -> 10.80.0.3
223.11.50.100 -> 10.80.0.4
static (inside,outside) 10.80.0.3 223.11.50.55 netmask 255.255.255.255 0 0
static (inside,outside) 10.80.0.4 223.11.50.100 netmask 255.255.255.255 0 0
Can I still use the above command e.g. global, nat, static in order to archive my objection. Is the static mapping be first run and then global, nat will be executed in lower priority. Thanks
There is a network 223.11.50.0 need to access to one host 10.80.0.1. I can use the global & nat command that allows the PAT mapping.
global (outside) 1 10.80.0.2 netmask 255.255.255.255
nat (inside) 1 223.11.50.0 255.255.255.0 0 0
However 2 pcs within the subnet need to identically map to 2 different global address:
223.11.50.55 -> 10.80.0.3
223.11.50.100 -> 10.80.0.4
static (inside,outside) 10.80.0.3 223.11.50.55 netmask 255.255.255.255 0 0
static (inside,outside) 10.80.0.4 223.11.50.100 netmask 255.255.255.255 0 0
Can I still use the above command e.g. global, nat, static in order to archive my objection. Is the static mapping be first run and then global, nat will be executed in lower priority. Thanks