How to allow ICMP when doing TCP PAT?

Unanswered Question
Sep 10th, 2007

PIX-515E running 7.2.2

Internal network on private IP addresses, external network on public addresses.

Each internal Web server has its own external IP address. PIX is doing PAT, mapping the external port 80/tcp to port 8080/tcp internally on each Web server like this:

static (inside,outside) tcp web1-ext 80 web1-int 8080 netmask

The problem is, now I cannot allow ICMP echo requests to the Web servers.

If I did NAT (see below) then ICMP would be able to pass, but I need to translate the port too, so this won't work for me:

static (inside,outside) web1-ext web1-int netmask

How to do PAT (80-->8080) but also allow inbound ICMP echo requests?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion