Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

can I make a inside host act as a server?

I use a pix 506 with pppoe ,then the outside of 506 can get a dynamic ip address from ISP,can I make an inside host (such as act as a server which the internet can access with the dynamic DNS and PAT technology?

or is there a command like "ip name-server x.x.x.x" of router?

New Member

Re: can I make a inside host act as a server?

Sorry, I'm not really sure what you are looking for? Please elaborate.

New Member

Re: can I make a inside host act as a server?

a pix 506,use pppoe to connect internet,because of pppoe,the ip address of the outside interface is a dynamic one(not static),can I make the inside server be accessed by the users in Internet?

New Member

Re: can I make a inside host act as a server?

I think you are asking whether or not you can statically map a port from the the dynamically assigned IP Address on the outside interface to a port of an address on the inside network? This can be achieved with the command:

static (inside,outside) tcp interface 80 insideipaddress 80 netmask

This would transfer any traffic that hits the interface on port 80 to your webserver on the inside network with address 'insideipaddress'

The issue here is that you need to allow the traffic into your outside interface through the access list, and the last time I checked, you couldn't use a keyword like 'interface' in an access list like you can in the static command, but actually have to specify the ip address of the outside interface. Obviously this is fine if your dynamic IP address tends tends to remain the same over a period of time as some do (for instance some ISPs issue a dynamically assigned fixed IP address), but if not then you would have to change your access-list statement every time your ip address changes, which is a pain.

Also, you should be aware that if you are not a business customer with a fixed IP address, your ISP may have some clause in your contract where you are not allowed to host servers on the service they are supplying - they tend to prefer you to pay the extra money for a static IP address :-/



CreatePlease to create content