How can it work

[cscisco_admin]

Can 192.168.2.11 connect to Terminal Server on Mapped IP?

Please check the attachment!

[a.alekseev]

According your diagram

192.168.2.11 is in an outside segment

But the same network is attached to pix's inside interface.

so PIX do not support such configurations.

[cscisco_admin]

Thanks very much. This is what i needed to know.

Now if i change pix inside interface IP like 192.168.22.1 then what configuration is needed to allow 192.168.21.11 connect to my Terminal Server on 192.168.21.2 through the mapped public ip of pix.

Thanks!

[a.alekseev]

You need static NAT or PAT and access-list on outside interface that permits connetions to you Terminal Server's piblic ip