PIX 3 interface dmz-inside static

[simonw]

Hi,

This looks correct to me, but doesn't work...

ip address inside 172.31.0.254 255.255.0.0

ip address antcleaner 192.168.50.1 255.255.255.0

static (inside,antcleaner) 192.168.50.5 172.31.0.5 netmask 255.255.255.255 0 0

access-list acl-ant line 1 permit tcp any host 192.168.50.5 eq www (hitcnt=0)

access-group acl-ant in interface antcleaner

can anyone see the problem?

[mhoda]

Hi,

This config looks good. Is there any nat 0 ACL configured on the PIX. When you do "show xlate" do you see the translation? When you execute "show local-host 172.31.0.5", what do you see? I would execute "clear xlate" as well to see if that ressolves the issue. You can also run the debug packet with ACL option on the PIX's antcleaner to see if the pix is receiving any packets or not.

Thanks,

Mynul