Pix 515 static command question

jeremy.abrams — Fri, 21 Feb 2020 06:32:44 GMT

I have a Pix 515 ver 6.2 that I'm trying to create a static map between my inside and DMZ interface. I have a host in the dmz that needs to access a database on the inside. I've tried setting it up several different ways, but when I following the manual I can't get it to work.

My inside interface is 192.168.114.1/24 and my DMZ interface is 10.61.3.1/24.

I created the following static per the manual:

static (inside,dmz) 10.61.3.1 host 192.168.114.5 netmask 255.255.255.255

access-list acl_dmz permit tcp 10.61.3.0 255.255.255.0 host 10.61.3.1

access-group acl_dmz in interface dmz

I've tried this static with a few different access-list but still couldn't get the traffic to use the static.

What I ended up doing to get it working was creating a static like this:

static(inside,dmz) 192.168.114.0 192.168.114.0 netmask 255.255.255.255

access-list acl_dmz permit tcp 10.61.3.0 255.255.255.0 host 192.168.114.5

access-group acl_dmz in interface dmz

Is this the correct way of doing it or is there a better way ?

Thanks

Re: Pix 515 static command question

Wed, 05 Feb 2003 18:24:47 GMT

Jeremy:

(for some reason the previous post did not appeared!)

go here:

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.ee915af

I had the same problem.. I posted one configuration file that works!

ciao

Luis

topic Re: Pix 515 static command question in Network Security

Pix 515 static command question

Re: Pix 515 static command question