To my best knowledge, you WILL NEED a global command when using the nat command, UNLESS you are using the nat-id 0 to disable nat on devices located on the inside network with public addresses.
Example: PIX(config)# nat (inside) 0 0 0 nat 0 0.0.0.0 will be non-translated PIX(config)# show nat nat (inside) 0 0.0.0.0 0.0.0.0 0 0 PIX(config)# Hth, Ole ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://www.RouterChief.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Need a Job? http://www.OleDrews.com/job ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -----Original Message----- From: Karagozian Sarkis [mailto:[EMAIL PROTECTED]] Sent: Monday, June 03, 2002 9:51 AM To: [EMAIL PROTECTED] Subject: PIX - Why NO glaobal (outside) command [7:45676] I have seen some PIX configs with NO global (outside) 1 ..... command but only see NAT (inside) 1 0 0 command . Does that mean all traffic is allowed to go out ??? Can someone expaln. Thanks Sarkis Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=45679&t=45676 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

