Right the setup is a pix 501 with one outside IP. Lets say 126.96.36.199.
What needs to be done is to allow an external company access (on ip 10.10.10.10) to 3 computers (192.168.1.1-192.168.1.3)on port 80. For remote access.
Now as far as I know I can only allow access from this external ip address to 1 of the computers as I only have one external IP (the firewall interface) and therefore only one port 80. As in these three lines of config:
access-list services permit tcp host 10.10.10.10 host 188.8.131.52 eq www
static (inside,outside) tcp interface www 192.168.1.1 www netmask 255.255.255.255 0 0
access-group services in interface outside
In conclusion there is no way I can allow access to the other two internal ips 192.168.1.2 or .3 from the external company ip 10.10.10.10.
All I need to know is if I am incorrect or if there is another way round it without more external IPs.
Many thanks for reading,