PIX 515e - Multiple WAN Interfaces - NAT Issue

[DanielO]

I am having issues translating on my PIX. I have 4 Interfaces that are all WAN interfaces and 1 LAN interface. I am trying to Translate port 80 through 1 of the WAN interfaces to an internal Webserver. I have tried everything I can think of an dits not happening. Any help would be great. Thanks,

[jwalker]

Can you send a copy of your config? Thanks.

[abdel_n]

Hi,

I guess you want to access your internal web server from the outside of one of your WAN interfaces.

1) Translate the internal ip of your web server (inside local) to an outside ip (inside global):

static (inside, outside) tcp interface 80 X.X.X.X 80 netmask 255.255.255.255

or using a different outside global ip Y.Y.Y.Y:

static (inside, outside) tcp Y.Y.Y.Y 80 X.X.X.X 80 netmask 255.255.255.255

2) Define an access-list to enable inbound traffic to your server (traffic destined to Y.Y.Y.Y/inteface):

access-list 100 permit tcp any host Y.Y.Y.Y

or

access-list 100 permit tcp any host

- Then bind your access-list to the outside inteface (WAN):

access-group 100 in interface