Question on PIX Static mapping

Unanswered Question
Feb 20th, 2003
User Badges:

Is it possible to have a one global IP address to be statically mapped to two separate IP adresses (one of them on the inside and one on the DMZ) by specifying the requested port?


I know that you can map multiple global IP addresses to a single internal address by specifing the port, but not sure about the single global to multiple internal.



Thanks in advance!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
steve.barlow Thu, 02/20/2003 - 10:40
User Badges:
  • Silver, 250 points or more

You mean something like this:

static (inside,outside) tcp 200.200.200.200 telnet 10.1.1.6 telnet netmask 255.255.255.255 0 0

static (inside,outside) tcp 200.200.200.200 ftp 10.1.1.3 ftp netmask 255.255.255.255 0 0


Hope it helps.

Steve

tvorhauer Sat, 02/22/2003 - 07:12
User Badges:

Yes, that is exactly what I am trying to accomplish.


Thanks for the help!

ovanjara Thu, 02/20/2003 - 10:48
User Badges:
  • Cisco Employee,

Yes, this is possible (port redirection)

I am attaching a link below which talks about this in detail.


http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/s.htm#1026694


However as an example below on how to achieve this:


static (inside, outside) tcp 192.168.1.1 ftp 10.1.1.1 ftp

static (inside, outside) tcp 192.168.1.1 http 10.1.1.2 http


Thanks,


Obaid.

Actions

This Discussion