pix static basics

nataraj_v — Fri, 21 Feb 2020 07:58:24 GMT

Dear All,

whts the difference in following two statements , any way whtever service u want to allow.. tht will be specified in access list . they y this particular port translation , can anybody..pls clear my doubt.

static (inside,outside) tcp 10.55.1.141 1415 172.16.2.95 1415 netmask 255.255.255.255 0 0

static (inside,outside) tcp 10.55.1.141 172.16.2.95 netmask 255.255.255.255 0 0

Thanks and Regards

Nataraj

Re: pix static basics

sachin — Fri, 18 Feb 2005 05:30:17 GMT

static (inside,outside) tcp 10.55.1.141 1415 172.16.2.95 1415 netmask 255.255.255.255 0 0

This statement is useful when you want to map single public IP with different private IPs on different tcp/udp ports.

Like you can say another statement--

static (inside,outside) tcp 10.55.1.141 80 172.16.2.96 80 netmask 255.255.255.255 0 0

So same public IP 10.55.1.141 port 80 is mapped to some other private IP 172.16.2.96.

But when you put statement like -

static (inside,outside) tcp 10.55.1.141 172.16.2.95 netmask 255.255.255.255 0 0

Then this public IP will be mapped to single private IP only.

In both the cases you have to open with access-list but the main difference is - you can save lot of public IPs by first method.

topic pix static basics in Network Security

pix static basics

Re: pix static basics