Pix 506 + ADSL static IP + http server reachability

[ddiggelen]

Dear readers,

I have ADSL + static single IP.

Instead of using linux firewall, I would like to use my PIX 506. My HTTP server is at inside at 10.1.1.100.

When configuring static to map outside interface address to port 80 at 10.1.1.100 I receive error message saying "ip address is already used on outside interface, can't specify translation rule for it".

Does this mean I need at least 2 global addresses, one for the outside interface, the other for the http internal server to become reachable ?

[nkhawaja]

Hi,

You need a statement like this

static (inside,outside) tcp interface 23 10.101.1.1 23 netmask 255.255.255.255

Thanks

Nadeem

[ddiggelen]

Thanks Nadeem.

It works. I wasn't aware of this second syntax of the static command, which was not listed in my cisco pix book.

Appreciate your quick reply on this.

regards,

diederik