RE: Cisco PIX query

[MHawkins () TULLIB COM]

Yes you can do port translation. From version 6 only.

But your syntax is incorrect.

Here it is:

static (inside,outside) tcp 203.82.170.93 www 102.165.2.9 www netmask
255.255.255.255 0 0
static (inside,outside) tcp 203.82.170.93 443 102.165.2.9 443 netmask
255.255.255.255 0 0

That should do it.

Michael A Hawkins

-----Original Message-----
From: firewall-wizards-admin () honor icsalabs com
[mailto:firewall-wizards-admin () honor icsalabs com]On Behalf Of ADSL-Nerd
Sent: Sunday, February 22, 2004 9:04 PM
To: firewall-wizards () honor icsalabs com
Subject: [fw-wiz] Cisco PIX query


Hi guys,

I've got a query on Cisco PIX, here's the background info:

Cisco PIX 515, 6.22

I've got the following static mapping in the PIX as seen below:

static (inside,outside) 203.82.170.93 102.165.2.9 netmask 255.255.255.255 0
0 static (inside,outside) 203.82.170.91 102.165.2.7 netmask 255.255.255.255
0 0

I'm trying to map the two public IPs 203.82.170.93 and 203.82.170.91 to the
same private IP 102.165.2.9 (Technically this is not possible).

IP 203.82.170.93 is permitted for 443 (SSL)
IP 203.82.170.91 is permitted for 25 (SMTP)

Is it possible to perform NAT/PAT as seen below: (If there's such commands)

static (inside,outside) 203.82.170.93 TCP 443 102.165.2.9 TCP 443 netmask
255.255.255.255 0 0 static (inside,outside) 203.82.170.91 TCP 25 102.165.2.9
TCP 25 netmask 255.255.255.255 0 0

Any other ways to do this in PIX?

Please advice.

Thanks.
James


_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards