PortForwarding in PIX515

Unanswered Question
Feb 22nd, 2009

Hi All,

My ip is this ip is forwarded to my leased line link from SP. Now i want to confgiure this ip with port forwarding in order to point to my server( in DMZ. My topology is


Any Clues for configuration??/

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jon Marshall Mon, 02/23/2009 - 03:06

As an example we'll port forward http (tcp port 80).

1) if is the outside interface address of your pix

static (dmz,outside) tcp interface 80 80 netmask

2) if is just a spare address you have

static (dmz,outside) tcp 80 80 netmask

note you need to use the interface name in your configuration so i have assumed your DMZ interface is called dmz ie. static (dmz,outside) .... If it is called something else use that.

You then need to update your acl or create one if you haven't already got one

access-list outside_in permit tcp any host eq 80

access-group outside_in in interface outside


Jon Marshall Mon, 02/23/2009 - 03:31

outside_in is just a name i usually call an acl applied to the outside interface. Doesn't matter what name you use as long as you apply it to the outside interface ie.

access-group in inteface outside



This Discussion