Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to configure PAT for a dynamic public IP

Our system : pix 506E, software version 6.3.

we use DSL from our ISP and only have dynamic IP address,which changes every few weeks. Currently we use a windows firewall software doing access control , which is not stable but otherwise works( we have dynamic DNS so end-user still use regular domian name ).

How can I configure Pix PAT to allow access to an Internal Linux server(ssh) and windows server(http), please help....

>>static (inside,outside) tcp Dynamic-IP 80 192.168.0.100 80 netmask 255.255.255.255

>>static (inside,outside) tcp Dynamic-IP 22 192.168.0.200 22 netmask 255.255.255.255...

Any advices and suggestions are greatly appreciated.

sean chang

1 ACCEPTED SOLUTION

Accepted Solutions
Gold

Re: How to configure PAT for a dynamic public IP

You need use command interface

>>static (inside,outside) tcp interface 80 192.168.0.100 80 netmask 255.255.255.255

>>static (inside,outside) tcp interface 22 192.168.0.200 22 netmask 255.255.255.255

It means that your outside interface public IP (dynamic) is always forwarded to yours inside IPs

M.

hope that helps rate if it does

2 REPLIES
Gold

Re: How to configure PAT for a dynamic public IP

You need use command interface

>>static (inside,outside) tcp interface 80 192.168.0.100 80 netmask 255.255.255.255

>>static (inside,outside) tcp interface 22 192.168.0.200 22 netmask 255.255.255.255

It means that your outside interface public IP (dynamic) is always forwarded to yours inside IPs

M.

hope that helps rate if it does

New Member

Re: How to configure PAT for a dynamic public IP

Perfect. Solved my problem.

I just couldn't find this "interface" by reading documentation.

Thanks.

145
Views
0
Helpful
2
Replies
CreatePlease login to create content