I am having a problem with incoming port redirection. I have allowed Lotus Notes traffic to a server which resides on a different subnet than the PIX, but I can't connect to it. I set up port redirection to another server that is on the same subnet as the PIX with no problems. Is there something that I need to do, other than setting up routes, to make it work?
The second route statement will force the PIX to send an ARP0 locally to find the destination on the first inside subnet. The router, if it's a Cisco one, should respond to this ARP (Proxy ARP feature), then the PIX will send packets to the right place.
If those variants of route don't work, you will have to enter in logging mode, debug level, to see what's happen.
I tried both of these options with no success. When I tried looking at the debugging information there is nothing showing up except traffic from the 192.168.6.0 network.
Something else that has emerged is that no other network except the one the PIX is on (inside) can directly access the internet. They can ping the PIX and access PDM, but not the internet. On the 192.168.6.0 network I can use WS_FTP with the firewall option configured to access external sites, but not from any other subnet.
One thing to note is that the PIX is not our default gateway. We use a proxy (Squid) to access the internet. Because the proxy was placed on the 192.168.6.0 network, I had't noticed the problem.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...