Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Hairpinning on a PIX 506?

Is there a "hairpinning" type solution in place for the 506 using 6.3(5)? DNS doctoring and alias does not fit our configuration needs.

6 REPLIES
Green

Re: Hairpinning on a PIX 506?

Hairpinning is not an option as traffic needs to enter and exit same interface. You need pix/asa 7. What are your needs?

New Member

Re: Hairpinning on a PIX 506?

Thanks for the reply. We have a java web tool that is hard coded within java to run on the external IP address. Dont ask me why the developers of the tool decided on this method. When the java app loads it uses a classloader of: http://x.x.x.x/data where X is the outside IP.

Green

Re: Hairpinning on a PIX 506?

I was going to recommend creating a dmz and doing destination NAT.

static (dmz,inside)

but you have a 506 :(

Hall of Fame Super Blue

Re: Hairpinning on a PIX 506?

Hi Adam

Just for reference.

We have a pix 506E running version 6.3(5) that does destination NAT using similiar static statements to the one above.

The 506E can do it as far as i am aware.

Jon

Green

Re: Hairpinning on a PIX 506?

Hey Jon,

I figured he didn't have a dmz with a 506, that was my point.

Hall of Fame Super Blue

Re: Hairpinning on a PIX 506?

Hi Adam

Good point !! - i missed that.

Of course you could always do 802.1q trunking but that's another story :-)

Cheers

Jon

608
Views
0
Helpful
6
Replies