NAT Help!

harrisgirls — Mon, 11 Mar 2019 21:40:26 GMT

Hello,

I have just received 4 static ip's from my isp, i want to be able to point these ip's at different services on my internal servers, for example:

smtp 212.xxx.xxx.1 > 192.168.1.50 (mail server)

80 212.xxx.xxx.2 > 192.168.1.51 (web server)

vpn 212.xxx.xxx.3 > 192.168.1.52 (vpn server)

rdp 212.xxx.xxx.4 > 192.168.1.53

The firewal I have is Cisco PIX 515, does anyone how how to set the NATing up or commands?

Thank you

varrao — Thu, 20 Oct 2011 12:59:44 GMT

Hi,

You would need these static statements:

static (inside,outside) 212.xxx.xxx.1 192.168.1.50

static (inside,outside) 212.xxx.xxx.2 192.168.1.51

static (inside,outside) 212.xxx.xxx.3 192.168.1.52

static (inside,outside) 212.xxx.xxx.4 192.168.1.53

and then you need to access-list on the outside:

access-list outside_access_in extended permit ip any 212.xxx.xxx.1

access-list outside_access_in extended permit ip any 212.xxx.xxx.2

access-list outside_access_in extended permit ip any 212.xxx.xxx.3

access-list outside_access_in extended permit ip any 212.xxx.xxx.4

access-group outside_access_in in interface outside

Hope that helps.

Thanks,

Varun

topic NAT Help! in Network Security