I have installed a new Exchange 2003 server on our LAN which, after a few tweaks in the PIX config is now working OK. PAT is enabled on the PIX with a single static translation for remote access to the database server. The following lines enable the SMTP feed process between ISP and the LAN
access-list acl_out permit tcp any host xx.xx.xx.189 eq smtp
access-list acl_out permit tcp any host xx.xx.xx.189 eq pop3
I would like to map one of our public reserved addresses to the mail server and enable access via http/https so Outlook Mobile Services will work. However, if I try to create a static translation to one of the public addresses, I get a conflict with the
If you have 'spare' public IPs then why not assign one of these IP's to your outside interface of PIX and then use the rest to port map your other services? As at the moment you are using just one IP and trying to assign your services via this one IP.
The 'keyword' interface on your static is only required when you have just the one IP BUT you say you have other spare public IPs??
So, if you do have spare public IPs then assign one of these to the outside interface of your PIX and use the others for SMTP/OWA etc..
access-list acl_out permit tcp any host xx.xx.xx.190 eq smtp
access-list acl_out permit tcp any host xx.xx.xx.191 eq https
access-list acl_out permit tcp any host xx.xx.xx.192 eq pop3
access-group acl_out in interface outside
**I'm assuming that now you have assigned .189 to PIX outside interface**
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...