topic Re: PIX 3 interface dmz-inside static in Network Security

PIX 3 interface dmz-inside static

simonw — Fri, 21 Feb 2020 06:47:58 GMT

Hi,

This looks correct to me, but doesn't work...

ip address inside 172.31.0.254 255.255.0.0

ip address antcleaner 192.168.50.1 255.255.255.0

static (inside,antcleaner) 192.168.50.5 172.31.0.5 netmask 255.255.255.255 0 0

access-list acl-ant line 1 permit tcp any host 192.168.50.5 eq www (hitcnt=0)

access-group acl-ant in interface antcleaner

can anyone see the problem?

Re: PIX 3 interface dmz-inside static

mhoda — Thu, 12 Jun 2003 20:32:23 GMT

Hi,

This config looks good. Is there any nat 0 ACL configured on the PIX. When you do "show xlate" do you see the translation? When you execute "show local-host 172.31.0.5", what do you see? I would execute "clear xlate" as well to see if that ressolves the issue. You can also run the debug packet with ACL option on the PIX's antcleaner to see if the pix is receiving any packets or not.

Thanks,

Mynul