| 9.2 |  | Network Address Translations |
| 9.2.5 |  | Static outside translations |

| Overview of static outside translations Outside NAT, or inbound NAT, is similar to inside NAT. The only difference is that outside NAT translates addresses of hosts residing on the outer or less secure interfaces of the PIX Security Appliance rather than the inner or more secure interfaces. To configure static outside NAT, use the static command to specify a one-to-one IP address mapping.

Outside NAT simplifies the integration of two existing networks that use overlapping IP address spaces. For example, in Figure the PIX Security Appliance connects two private networks with overlapping address ranges. One of the private networks uses the range of addresses from 10.0.0.1 to 10.0.0.50 and the other network uses the range from 10.0.0.2 to 10.0.0.99. These two networks cannot communicate with each other unless outside NAT is configured. For example, inside host 10.0.0.2 cannot contact outside host 10.0.0.2 because the packet would be routed directly back to the sending host rather than to the intended destination.

The online command reference and the demonstration activity examine the static command again and how it can be configured to support outside NAT.

| Media Activity Demonstration Activity: Enabling Static Outside Translations In this activity, students will learn about static outside translations and how they can help when an organization has two different locations using the same private address range.