Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

PIX 3 interface dmz-inside static

Hi,

This looks correct to me, but doesn't work...

ip address inside 172.31.0.254 255.255.0.0

ip address antcleaner 192.168.50.1 255.255.255.0

static (inside,antcleaner) 192.168.50.5 172.31.0.5 netmask 255.255.255.255 0 0

access-list acl-ant line 1 permit tcp any host 192.168.50.5 eq www (hitcnt=0)

access-group acl-ant in interface antcleaner

can anyone see the problem?

1 REPLY
Silver

Re: PIX 3 interface dmz-inside static

Hi,

This config looks good. Is there any nat 0 ACL configured on the PIX. When you do "show xlate" do you see the translation? When you execute "show local-host 172.31.0.5", what do you see? I would execute "clear xlate" as well to see if that ressolves the issue. You can also run the debug packet with ACL option on the PIX's antcleaner to see if the pix is receiving any packets or not.

Thanks,

Mynul

80
Views
0
Helpful
1
Replies
CreatePlease login to create content