topic Re: How to configure PAT for a dynamic public IP in Network Security

How to configure PAT for a dynamic public IP

sean chang — Mon, 11 Mar 2019 09:21:30 GMT

Our system : pix 506E, software version 6.3.

we use DSL from our ISP and only have dynamic IP address,which changes every few weeks. Currently we use a windows firewall software doing access control , which is not stable but otherwise works( we have dynamic DNS so end-user still use regular domian name ).

How can I configure Pix PAT to allow access to an Internal Linux server(ssh) and windows server(http), please help....

>>static (inside,outside) tcp Dynamic-IP 80 192.168.0.100 80 netmask 255.255.255.255

>>static (inside,outside) tcp Dynamic-IP 22 192.168.0.200 22 netmask 255.255.255.255...

Any advices and suggestions are greatly appreciated.

sean chang

Re: How to configure PAT for a dynamic public IP

m.sir — Thu, 18 Jan 2007 14:43:04 GMT

You need use command interface

>>static (inside,outside) tcp interface 80 192.168.0.100 80 netmask 255.255.255.255

>>static (inside,outside) tcp interface 22 192.168.0.200 22 netmask 255.255.255.255

It means that your outside interface public IP (dynamic) is always forwarded to yours inside IPs

hope that helps rate if it does

Re: How to configure PAT for a dynamic public IP

sean chang — Thu, 18 Jan 2007 15:32:11 GMT

Perfect. Solved my problem.

I just couldn't find this "interface" by reading documentation.

Thanks.