Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

how to solve Pix

Dear All,

I am really newer for ciscopix. but I did attached configuration for pix. I have windows 2003 SBS ip address behind pix. static nat to inside webserver from outside good working. but only not working from DHCP users of Windows server to own webserver.

How I can access it from DHCP users of Windows 2003 sbs. Please advise me.

I think here missing ip route or others.

Many thanks

New Member

Re: how to solve Pix

Hi Dear,

if the DHCP users are assigned ip address in the range 192.168.23.X and they are connected to the same lan with the servers, then it's not PIX problem as in this case users requests are sent to the servers directly not through the pix.

recheck ip range of DHCP and connectivity.

let know any updates.

Best regards,

Mohammed Moustafa.


Re: how to solve Pix

Users on network 192.168.23.x/24 accessing the web server with IP address or

with domain name? If that is true, it will NOT


You need to deploy alias or something like this:

static (i,o) netmask dns

I am assuming your ISP host the DNS server for you right? If so, the ASA will re-write the

DNS reply and that you can access the site

with domain name.

Easy right?


Re: how to solve Pix

To me it looks like you have some IP/Subnetting issues. You have a default route to, your static statement is and your outside IP address is with a 28 Bit Mask ( I don't see how any of those are even on the same network, unless the subnet .240 is wrong. I'm assuming the .100 and .95 are wrong, as .95 is a broadcast address on the .80 subnet, the .100 is in the middle of the .96 subnet. The .225 seems logical because it's the first host on the .224 subnet so subesequent hosts would be 226, 227 through .238.

I could be looking at this wrong, but please double-check those items for me.