Is this possible?

[Guus13]

I like to launch the following case:

We have a PIX525.

Internal IP addresses: Webserver 172.31.253.1 and Citrix Metaframe 172.31.253.2

PIX Outside interface: 80.79.23.111

I want remote users to be able to connect to as well as to the webserver as to the Citrix metaframe.

For the webserver port 80 (http)

For the Citrix metaframe port 1494 (citrix-ica)

I don’t want to use public addresses for the webserver and the Citrix metaframe.

Is there a possibility to realise this.

Thanks,

Guus

[mostiguy]

those are unroutable addresses. for people to access services across the internet, they need to connect to public ip addresses. the only other way is to make them vpn in

[mklaphek]

Yes, it's possible. Use the following command for your web server:

static (inside, outside) tcp interface 80 172.31.253.1 80 netmask 255.255.255.255

Use similar ones for your other servers.

You will also need an access-list to allow inbound access

[Guus13]

Thanks for your answer.