how to solve Pix

Cybermongol · ‎08-31-2008

Dear All,

I am really newer for ciscopix. but I did attached configuration for pix. I have windows 2003 SBS ip address 192.168.23.6 behind pix. static nat to inside webserver from outside good working. but only not working from DHCP users of Windows server to own webserver.

How I can access it from DHCP users of Windows 2003 sbs. Please advise me.

I think here missing ip route or others.

Many thanks

mohammed_moustafa · ‎08-31-2008

Hi Dear,

if the DHCP users are assigned ip address in the range 192.168.23.X and they are connected to the same lan with the servers, then it's not PIX problem as in this case users requests are sent to the servers directly not through the pix.

recheck ip range of DHCP and connectivity.

let know any updates.

Best regards,

Mohammed Moustafa.

cisco24x7 · ‎08-31-2008

Users on network 192.168.23.x/24 accessing the web server with IP address 202.131.xxx.100 or

with domain name? If that is true, it will NOT

work.

You need to deploy alias or something like this:

static (i,o) 202.131.xxx.100 192.168.23.6 netmask 255.255.255.255 dns

I am assuming your ISP host the DNS server for you right? If so, the ASA will re-write the

DNS reply and that you can access the site

with domain name.

Easy right?

jpoplawski · ‎09-04-2008

To me it looks like you have some IP/Subnetting issues. You have a default route to 202.131.2.225, your static statement is 202.131.2.100 and your outside IP address is 202.131.2.95 with a 28 Bit Mask (255.255.255.240). I don't see how any of those are even on the same network, unless the subnet .240 is wrong. I'm assuming the .100 and .95 are wrong, as .95 is a broadcast address on the .80 subnet, the .100 is in the middle of the .96 subnet. The .225 seems logical because it's the first host on the .224 subnet so subesequent hosts would be 226, 227 through .238.

I could be looking at this wrong, but please double-check those items for me.

Cheers,

JB