Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About EdHayes
EdHayes
Comes here often
Member since May 26, 2021
Apr 1 2023
Community Record
4
Posts
0
Kudos
0
Solutions
Jun 4 2021
5:38 AM
Any update on this question please as I still don't have an answer to what I'm trying to achieve .... Any more info or guidance would be much appreciated ...
... View more
May 28 2021
5:25 AM
Thanks for the reply. If I try to configure a 1:Many NAT or a 1:1 Nat the uplink option is either Internet 1 or Internet 2, are you saying that this would be not relevant if specified the address of the DMZ ? Also is it possible to use a Pool of IP addresses for the destination NAT ?
... View more
May 27 2021
3:13 AM
HI Philip, Thanks for your reply. I am trying to NAT out on a DMZ interface which has a private address (10.x.y.z) with overload on that address (PAT), which I cant see how to do that. The DMZ is effectively just a VLAN assigned to a port on the MX. I cant see a configuration option where it's possible to do a private NAT in the MX other than on a WAN Internet Port.
... View more
May 26 2021
9:04 AM
I have a requirement for a Vlan (192.16.x.y) on a MX100 to be natted to a private address (10.x.y.z) which exists on an interface on the MX but it's not a Internet interface, it;s an external DMZ interface. I basically need a many to one NAT function which is not destined for the Internet. I don't think this is possible with the MX Security Appliance, if it is then I would greatly appreciate some help on this. Would one option be to connect the DMZ to the second WAN Internet Port and configure a private address on it (10.x.y.z) and then would it be possible to do a Many to 1 NAT over this from the internal Vlans ?
... View more
© 2025 Cisco Systems, Inc.
