cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
254
Views
0
Helpful
1
Replies

PIX 3 interface dmz-inside static

simonw
Level 1
Level 1

Hi,

This looks correct to me, but doesn't work...

ip address inside 172.31.0.254 255.255.0.0

ip address antcleaner 192.168.50.1 255.255.255.0

static (inside,antcleaner) 192.168.50.5 172.31.0.5 netmask 255.255.255.255 0 0

access-list acl-ant line 1 permit tcp any host 192.168.50.5 eq www (hitcnt=0)

access-group acl-ant in interface antcleaner

can anyone see the problem?

1 Reply 1

mhoda
Level 5
Level 5

Hi,

This config looks good. Is there any nat 0 ACL configured on the PIX. When you do "show xlate" do you see the translation? When you execute "show local-host 172.31.0.5", what do you see? I would execute "clear xlate" as well to see if that ressolves the issue. You can also run the debug packet with ACL option on the PIX's antcleaner to see if the pix is receiving any packets or not.

Thanks,

Mynul

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: