PIX 501 Port forwarding

[brettm731]

Hi,

I have a client who has installed a PIX 501. The client was given just

one ip address which has been configuered as the outside interface.

The end result is they want to forward http traffic to a Web server

within. PAT is configured via:

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

The problem is that it appears one cannot static the outside interface

to a local address (I assume this is true from the config examples I

have seen on the Web.) I have also witnessed my ssh connection drop

when I try ;-) On a cheap Linksys (etc.) this is trivial. Do I really

need two routable ip addresses so that one can be the outside

interface on the PIX and the other ip map to an inside address?

Thanks!

[brettm731]

Nevermind...

"...Static PAT Examples

To redirect Telnet traffic from the PIX Firewall outside interface to the inside host at 10.1.1.15, enter:

static (inside,outside) tcp interface telnet 10.1.1.15 telnet netmask 255.255.255.255.."