cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
293
Views
0
Helpful
3
Replies

can I make a inside host act as a server?

jeff.lee
Level 1
Level 1

I use a pix 506 with pppoe ,then the outside of 506 can get a dynamic ip address from ISP,can I make an inside host (such as 192.168.0.1) act as a server which the internet can access with the dynamic DNS and PAT technology?

or is there a command like "ip name-server x.x.x.x" of router?

3 Replies 3

lwierenga
Level 1
Level 1

Sorry, I'm not really sure what you are looking for? Please elaborate.

a pix 506,use pppoe to connect internet,because of pppoe,the ip address of the outside interface is a dynamic one(not static),can I make the inside server be accessed by the users in Internet?

I think you are asking whether or not you can statically map a port from the the dynamically assigned IP Address on the outside interface to a port of an address on the inside network? This can be achieved with the command:

static (inside,outside) tcp interface 80 insideipaddress 80 netmask 255.255.255.255

This would transfer any traffic that hits the interface on port 80 to your webserver on the inside network with address 'insideipaddress'

The issue here is that you need to allow the traffic into your outside interface through the access list, and the last time I checked, you couldn't use a keyword like 'interface' in an access list like you can in the static command, but actually have to specify the ip address of the outside interface. Obviously this is fine if your dynamic IP address tends tends to remain the same over a period of time as some do (for instance some ISPs issue a dynamically assigned fixed IP address), but if not then you would have to change your access-list statement every time your ip address changes, which is a pain.

Also, you should be aware that if you are not a business customer with a fixed IP address, your ISP may have some clause in your contract where you are not allowed to host servers on the service they are supplying - they tend to prefer you to pay the extra money for a static IP address :-/

HTH

Kev

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: