We have a full class C subnet on the PIX outside interface, part of this range is being used for static NAT for various www servers. Our intranet servers are accessed using the ouside NAT'd IP address rather than the real IP and we're having problems accessing the www servers. The problem isn't be caused by an ACL as I have permit all at the moment.
Interestingly if I change the subnetting so the NAT ranges are in a different subnet to the PIX outside interface the www servers become available.
Obviously changing the subnetting like this means all traffic goes out to the ISP router then comes back into the PIX which seems a little messy to me, is there any other way around this other than changing the IP addresses the intranet is accessed on?
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...