How to configure PAT for a dynamic public IP

[sean chang]

Our system : pix 506E, software version 6.3.

we use DSL from our ISP and only have dynamic IP address,which changes every few weeks. Currently we use a windows firewall software doing access control , which is not stable but otherwise works( we have dynamic DNS so end-user still use regular domian name ).

How can I configure Pix PAT to allow access to an Internal Linux server(ssh) and windows server(http), please help....

>>static (inside,outside) tcp Dynamic-IP 80 192.168.0.100 80 netmask 255.255.255.255

>>static (inside,outside) tcp Dynamic-IP 22 192.168.0.200 22 netmask 255.255.255.255...

Any advices and suggestions are greatly appreciated.

sean chang

[m.sir · Accepted solution]

You need use command interface

>>static (inside,outside) tcp interface 80 192.168.0.100 80 netmask 255.255.255.255

>>static (inside,outside) tcp interface 22 192.168.0.200 22 netmask 255.255.255.255

It means that your outside interface public IP (dynamic) is always forwarded to yours inside IPs

M.

hope that helps rate if it does

[sean chang]

Perfect. Solved my problem.

I just couldn't find this "interface" by reading documentation.

Thanks.