Question on Pix Configuration

jrhofman — Fri, 21 Feb 2020 07:36:47 GMT

I have a Pix configuration with a single host on the inside interface that needs access to a single host on the outside interface (FTP services). The real address of the outside host is 172.19.75.245. I need the host on the inside to access this address as if it were 10.100.3.245. How would I acomplish this. My config right now looks like this.

PIX Version 6.3(3)

interface ethernet0 100full

interface ethernet1 100full

nameif ethernet0 outside security0

nameif ethernet1 inside security100

names

name 172.19.75.245 BotWFTPServer

object-group service BoWFTPServer tcp

port-object eq ftp-data

port-object eq ftp

access-list inside_access_in permit tcp host 10.100.17.68 host 10.100.3.245 object-group BoWFTPServer

ip address outside 10.100.2.1 255.255.255.0

ip address inside 10.100.17.1 255.255.255.0

pdm location 10.100.17.68 255.255.255.255 inside

pdm location BotWFTPServer 255.255.255.255 outside

static (outside,inside) 10.100.3.245 BotWFTPServer netmask 255.255.255.255 0 0

access-group inside_access_in in interface inside

route outside BotWFTPServer 255.255.255.255 10.100.2.2 1

timeout xlate 3:00:00

This is only part of the config but addresses my above requirement I think. This was configured with the PDM.

Will this work properly? Is there a better way to accomplish this?

Re: Question on Pix Configuration

benjamingarcia — Fri, 03 Sep 2004 00:19:51 GMT

Your config should work mate.

I don't think there is another way of accomplishing it. Just make sure that your DNS resolve the 10.100.3.245 instead of the actual valid IP address

topic Re: Question on Pix Configuration in Network Security

Question on Pix Configuration

Re: Question on Pix Configuration