topic Re: PIX 515e - Multiple WAN Interfaces - NAT Issue in Network Security

PIX 515e - Multiple WAN Interfaces - NAT Issue

DanielO — Fri, 21 Feb 2020 09:07:13 GMT

I am having issues translating on my PIX. I have 4 Interfaces that are all WAN interfaces and 1 LAN interface. I am trying to Translate port 80 through 1 of the WAN interfaces to an internal Webserver. I have tried everything I can think of an dits not happening. Any help would be great. Thanks,

Re: PIX 515e - Multiple WAN Interfaces - NAT Issue

jwalker — Fri, 18 Aug 2006 20:34:51 GMT

Can you send a copy of your config? Thanks.

Re: PIX 515e - Multiple WAN Interfaces - NAT Issue

abdel_n — Sat, 19 Aug 2006 15:13:43 GMT

Hi,

I guess you want to access your internal web server from the outside of one of your WAN interfaces.

1) Translate the internal ip of your web server (inside local) to an outside ip (inside global):

static (inside, outside) tcp interface 80 X.X.X.X 80 netmask 255.255.255.255

or using a different outside global ip Y.Y.Y.Y:

static (inside, outside) tcp Y.Y.Y.Y 80 X.X.X.X 80 netmask 255.255.255.255

2) Define an access-list to enable inbound traffic to your server (traffic destined to Y.Y.Y.Y/inteface):

access-list 100 permit tcp any host Y.Y.Y.Y

access-list 100 permit tcp any host

- Then bind your access-list to the outside inteface (WAN):

access-group 100 in interface