PIX-515E running 7.2.2
Internal network on private IP addresses, external network on public addresses.
Each internal Web server has its own external IP address. PIX is doing PAT, mapping the external port 80/tcp to port 8080/tcp internally on each Web server like this:
static (inside,outside) tcp web1-ext 80 web1-int 8080 netmask 255.255.255.255
The problem is, now I cannot allow ICMP echo requests to the Web servers.
If I did NAT (see below) then ICMP would be able to pass, but I need to translate the port too, so this won't work for me:
static (inside,outside) web1-ext web1-int netmask 255.255.255.255
How to do PAT (80-->8080) but also allow inbound ICMP echo requests?
