NAT or Global in Pix525 ??

[DarlienDA]

Hi guys,

How do I assign fix Ip to my web server ?

Currently I have 5 available IP 60.49.208.220 - 60.49.208.224 .

I want my web server(10.10.1.5) to use 60.49.208.221 and email server to use 60.49.208.222 (10.10.1.10) . The rest remaining IP will be on the inside.

Is this list of command correct ?

global (outside) 1 60.49.208.220-60.49.208.224

nat (inside) 1 10.88.0.0 255.255.0.0 0 0

static (inside,outside) 60.49.208.221 10.10.1.5 0 0

static (inside,outside) 60.49.208.222 10.10.1.10 0 0

access-list outside_access_in permit tcp any host 60.49.208.221 eq www

access-list outside_access_in permit tcp any host 60.49.208.222 eq smtp

Please let me know where I have been wrong ?

[jmia]

This should do the trick...

In config mode:

ip address outside 60.49.208.x 255.255.255.x

ip address inside 10.10.1.x 255.255.255.0

access-list outside_access_in permit tcp any host 60.49.208.221 eq www

access-list outside_access_in permit tcp any host 60.49.208.222 eq smtp

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) tcp 60.49.208.221 www 10.10.1.5 www netmask 255.255.255.255 0 0

static (inside,outside) tcp 60.49.208.222 smtp 10.10.1.10 smtp netmask 255.255.255.255 0 0

route outside 0.0.0.0 0.0.0.0

Save with: write mem AND issue: clear xlate

Hope this helps and please rate post if it does.

Jay