Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Multiples outside IP's in a Pix 506E

Hello I have a "Cisco pix 506E" and need to altogether assign it to its external interface "Outside" several IP 8... In order to manage the access to several services of mail, Web, dns, ect... It is possible to make this?

thank you very much by its aid

1 REPLY

Re: Multiples outside IP's in a Pix 506E

You cannot assign multiple IPs on the outside interface but you can NAT Network Address Translate multiple Public IPs and forward all the traffic that commes to that public IP on a DMZ or other Network Node.

It is also possible for forward all traffic that comes on a specific port example TCP 80.

examples:

NAT example:

access-list acl_outside remark Permit any host to access WWW-Server with http

access-list acl_outside permit tcp any host WWW-Public eq www

access-list acl_outside remark Permit any host to access SMTP-Server with smtp

access-list acl_outside permit tcp any host SMTP-Public eq smtp

access-group acl_outside in interface outside

static (dmz,outside) WWW-Public WWW-DMZ netmask 255.255.255.255 0 0

static (dmz,outside) SMTP-Public SMTP-DMZ netmask 255.255.255.255 0 0

PAT example:

access-list acl_out permit tcp any host PIXOutsideIP eq http

access-group acl_out in interface outside

static (inside,outside) tcp PIXOutsideIP http InsideWWW-IP http netmask 255.255.255.255 0 0

Cisco example:

Establishing Connectivity:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a0080172786.html

Config examples PIX:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/prod_configuration_examples_list.html

sincerely

Patrick

175
Views
0
Helpful
1
Replies
CreatePlease to create content