topic Re: PIX with 2 HTTP Routes in Network Security

PIX with 2 HTTP Routes

townofnewmarket — Mon, 11 Mar 2019 11:27:42 GMT

My PIX currently has this statement:

static (inside,outside) tcp 74.74.74.74 www 192.168.10.5 www netmask 255.255.255.255 0 0

now I also want my box at 192.168.10.6 to be hittable with the real IP 74.74.74.75

yet I keep getting an "overlaps with" error out of the PIX when I issue the command to enable it. What am I missing?

Re: PIX with 2 HTTP Routes

acomiskey — Fri, 19 Oct 2007 18:52:07 GMT

So you added...?

static (inside,outside) 74.74.74.75 192.168.10.6 netmask 255.255.255.255

If it says "INFO:..." it is just an information message, not an error.

Re: PIX with 2 HTTP Routes

townofnewmarket — Fri, 19 Oct 2007 19:04:04 GMT

I added:

static (inside,outside) 74.74.74.75 192.168.10.6 netmask 255.255.255.255 0 0

and I get this:

ERROR: static overlaps with 74.74.74.75 to 192.168.10.6

Re: PIX with 2 HTTP Routes

acomiskey — Fri, 19 Oct 2007 19:04:53 GMT

What other statics do you have in place?

Re: PIX with 2 HTTP Routes

townofnewmarket — Fri, 19 Oct 2007 19:12:20 GMT

static (inside,outside) tcp interface 3389 192.168.6.9 3389 netmask 255.255.255.255 0 0

static (inside,outside) tcp interface telnet 192.168.1.201 telnet netmask 255.255.255.255 0 0

static (inside,outside) tcp 74.74.74.74 www 192.168.10.5 www netmask 255.255.255.255 0 0

static (inside,outside) tcp 74.74.74.74 https 192.168.10.5 https netmask 255.255.255.255 0 0

static (inside,outside) 74.74.74.74 192.168.10.5 netmask 255.255.255.255 0 0

static (inside,outside) 74.74.74.75 192.168.10.6 netmask 255.255.255.255 0 0

Re: PIX with 2 HTTP Routes

acomiskey — Fri, 19 Oct 2007 19:15:25 GMT

You can't have both of these at the same time...

static (inside,outside) 74.94.136.137 192.168.10.6 netmask 255.255.255.255 0 0

static (inside,outside) 74.74.74.75 192.168.10.6 netmask 255.255.255.255 0 0

as they both have 192.168.10.6.

Re: PIX with 2 HTTP Routes

townofnewmarket — Fri, 19 Oct 2007 19:18:33 GMT

typo on my part!

that first line was from an older config and does not apply. I corrected it in my previous post.

Re: PIX with 2 HTTP Routes

acomiskey — Fri, 19 Oct 2007 19:22:23 GMT

Ok so if you wanted

static (inside,outside) 74.74.74.75 192.168.10.6 netmask 255.255.255.255 0 0

it appears you already have it!

My guess is it gave you a warning the first time you entered it, then you tried to enter it again and is giving you an error because it already exists.