RE: [fw-wiz] pix 501 as bridge firewall. Possible?

From: Hoang, Binh P,,DMDCWEST (Hoangbp_at_osd.pentagon.mil)
Date: 08/19/03

  • Next message: R. DuFresne: "[fw-wiz] pixen abnomalities;" 
    To: 'Paul Matuszewski' <sase@five-elements.com>, firewall-wizards@honor.icsalabs.com
Date: Tue, 19 Aug 2003 11:52:45 -0400

    You can use nat (inside) 0 which allows non-translation.

    Nat (inside) 0 192.168.2.0 255.255.255.0 0 0

    Hope this helps.

    Binh Hoang

    -----Original Message-----
    From: Paul Matuszewski [mailto:sase@five-elements.com]
    Sent: Sunday, August 17, 2003 11:37 PM
    To: firewall-wizards@honor.icsalabs.com
    Subject: [fw-wiz] pix 501 as bridge firewall. Possible?

    Hey all,
    I've used Pix's as NAT'ing firewalls specifying different address pools on
    different interfaces on 10k situations.. works flawlessly. However,
    whenever I am doing any kind of situation where I need the internal network
    has public IP space.. I use packet filtering on a router.

    So my question is as follows, is the following situation possible:

    OUTSIDE: 192.168.1.0/24
    INSIDE: 192.168.2.0/24
    Outside network communicates directly with inside IP's and vica versa with
    NO natting.

    Is that possible? or am I missing something here?

    Thanks.

    ---------------------------

    Paul Matuszewski
    Systems Administration
    In Office Networks
    http://www.inofficenetworks.com
    V:(516) 816-4871
    V:(305) 799-4871
    F:(305) 441-2804

    _______________________________________________
    firewall-wizards mailing list firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: R. DuFresne: "[fw-wiz] pixen abnomalities;"

    Relevant Pages