Question on PIX Static mapping

tvorhauer · ‎02-20-2003

Is it possible to have a one global IP address to be statically mapped to two separate IP adresses (one of them on the inside and one on the DMZ) by specifying the requested port?

I know that you can map multiple global IP addresses to a single internal address by specifing the port, but not sure about the single global to multiple internal.

Thanks in advance!

steve.barlow · ‎02-20-2003

You mean something like this:

static (inside,outside) tcp 200.200.200.200 telnet 10.1.1.6 telnet netmask 255.255.255.255 0 0

static (inside,outside) tcp 200.200.200.200 ftp 10.1.1.3 ftp netmask 255.255.255.255 0 0

Hope it helps.

Steve

tvorhauer · ‎02-22-2003

Yes, that is exactly what I am trying to accomplish.

Thanks for the help!

ovanjara · ‎02-20-2003

Yes, this is possible (port redirection)

I am attaching a link below which talks about this in detail.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/cmdref/s.htm#1026694

However as an example below on how to achieve this:

static (inside, outside) tcp 192.168.1.1 ftp 10.1.1.1 ftp

static (inside, outside) tcp 192.168.1.1 http 10.1.1.2 http

Thanks,

Obaid.

tvorhauer · ‎02-22-2003

Thank you for the help!