PIX 506 DSL Webmail and 1 IP address

[jcleary]

Customer has a PIX DSL with 1 static IP address and they have an exchange server that needs to be seen from the outside world. Can i do A static with the outside ip address allowing port 80 to an inside address? I know i can do this on a router but not sure with a PIX

[Patrick Iseli]

Here is an example:

http server is: 192.168.1.10

ip address outside YOUR-PUB-IP 255.255.255.240

ip address inside 192.168.1.1 255.255.255.0

access-list acl_out permit tcp any interface eq http

access-group acl_out in interface outside

static (inside,outside) tcp interface http 192.168.1.10 http netmask 255.255.255.255 0 0

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

route outside 0.0.0.0 0.0.0.0 Gateway 1

You have maybe to disable the PIX device manager as

it uses http too?

no http server enable

See also:

Using nat, global, static, conduit, and access-list Commands and Port Redirection on PIX

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aad.shtml#topic9

sincerely

Patrick

[jcleary]

Thank you sir!!!