cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
403
Views
0
Helpful
1
Replies

Access servers behind CSS

yolo230985
Level 1
Level 1

I have this very simple configuration based on a CSS11152:

W1----[CSS]----[Catalyst]---[PIX]---[INTERNET]

W2---/

CSS:

VLAN 1 {W1,W2} IP: 192.168.1.1

VLAN 2 {Catalyst} IP: 10.0.0.5

W1:

IP:192.168.1.10/24 Gateway:192.168.1.1

W2:

IP:192.168.1.20/24 Gateway:192.168.1.1

PIX:

IP inside: 10.0.0.1

IP outside: XX.XX.XX.XX

The question is how can I have direct access to the W1 and W2 servers from the Internet? Is it possible with this topology or should I change anything?

1 Reply 1

Gilles Dufour
Cisco Employee
Cisco Employee

it is possible.

Just assume the CSS is a router.

It will simply route the traffic to W1 and W2.

So the pix needs to nat from private to public address.

Regards,

Gilles.

Review Cisco Networking for a $25 gift card