Pix Output Analysis Question

Thomas Reiling — Mon, 11 Mar 2019 19:38:03 GMT

I ran the Output Interpreter on our 506e and got the following:

WARNING: The IP address, 6x.172.214.193, of the 'outside' interface overlaps with

the static defined by:

'static (inside, outside) 6x.172.214.193 10.2.28.3 netmask 255.255.255.255'.

Can someone please tell me what this means exactly and how I might resolve it?

Thank you,

Thomas

Re: Pix Output Analysis Question

Federico Coto Fajardo — Thu, 20 Jan 2011 17:02:01 GMT

Hi,

The problem is that you're attempting to use the same IP address on the outside interface of the PIX and on a static command. You cannot do that.

The reason this is an error is because the PIX will not know if the traffic is intended to itself or it should redirect the traffic to the private IP.

The fix is to create a static with port redirection... for example if you need to access the server via web do this:

no static (inside, outside) 6x.172.214.193 10.2.28.3 netmask 255.255.255.255

static (inside, outside) tcp 6x.172.214.193 80 10.2.28.3 80 netmask 255.255.255.255

Federico.

topic Re: Pix Output Analysis Question in Network Security

Pix Output Analysis Question

Re: Pix Output Analysis Question