PAT from a inside interface to outside interface ..

[bladeka]

GUys !
please help me out there !
i need a solution

i have a 505 PIX ...
i want to do a pat of the number of internal ip's from the inside interface to be mapped on 1 ip of the outside interface ..
my request is to do a static mapping as the source port ...
explanation:
Internal Segment
192.168.0.0/24
External Segment
172.16.16.0/24

i want hostA=192.168.0.10 using src port 4100 to to be patted on the only external interface ip 172.16.16.3 using source port 4100

hostB=192.168.0.11 using source port 5000 to be patted on the only external interface ip 172.16.16.3 using source port 5000


can that be done ?
a star if i really solved this problem !

 

[rudeboy]

global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0

The above command first sets the IP of the outside interface to be used for PAT. It then allows all IP's on the inside to PAT off of the one IP. This is assuming that the one IP you are using for PAT is also the IP of the outside interface. This should give you want you want. All internal IP's get the same public IP, however their ports will be different.

 

[dopehead]

Problem is that you can't select the source port in either nat/static nat so this is not doable. Any particular reason for this, i have never had anyone ask me to restrict source port in nat, also you would never be able to have more than one session, since pat uses source ports to control sessions with.

Jan


Network Systems Engineer
CCNA/CQS/CCSP/Infosec

 

[bladeka]

dopehead !
yes i want to ristrict my source port .. what can i do ?!
do u know any solutions !?