PIX 501 and Port Redirection

[ckloh]

I host a FTP server behind PIX 501 firewall and would like to redirect the incoming FTP request from the PIX to the FTP Server. I have a static IP address outside the firewall ( let say, IP is 128.168.28.10) and the firewall doing the DHCP (firewall Ip is, say 10.1.1.1). My FTP server IP is, say 10.1.1.3. What is the correct codes I have to input into the firewall ver 6.1 management software in order to get the redirection to work? Any help would be appreciated. Thanks.

[wolfrikk]

you would have to create a static mapping from the external IP to internal ip.

Static (inside,outside) 128.168.28.10 10.1.1.3 netmask 255.255.255.255

If this is your only external IP, you will have to configure a static PAT mapping.

static (inside,outside) 128.168.28.10 eq 21 10.1.1.3 eq 21 netmask 255.255.255.255

You would also have to open up the ports on you ACL also.

[ckloh]

Thanks. Do I have to reconfigure the global outside address too?

My current setting is global (outside) 1 interface, should I configure to global (outside) 1 128.168.28.10?

[wolfrikk]

I would leave the global statement alone. It should work fine using the outside interface IP.