Help with pix static nat translation

[Endwigast]

Hi,

We have a dsl connected to a pix and I also happen to have a couple of public ip. What I wanna do is to give one of my network equipment (switch) a public ip so that I could access it from the public internet.

I have this configured at our pix:

static (inside,outside) <public ip> <private ip - ip of switch> netmask 255.255.255.255 0 0

Inside interface of the pix and ip of the switch is on the same subnet. I configured default gateway on the switch to be the inside interface of the pix.

after that I tried telnetting to the switch but I could not telnet into it. Am I missing somehing in the config? Help pls. Thanks.

[fransedano]

For going from a LOW security interface to a HIGH security interface, you need to add an Access list to permit it;

access-li ACL_OUTSIDE_IN permit tcp 0 0 interface outside eq

access-group ACL_OUTSIDE_IN in interface outside

[Endwigast]

Thanks for the help it's working now.