Pix-Firewall IP static connections

[avvenk]

Hi,

On PIX-Firewall 515E, I need to identify internal SMTP Servers IP (192.168.168.7 on DMZ and 192.168.5.29 on Inside) like public IP 217.220.28.164 on Outside.

Having already PAT configured on:

global (outside) 1 interface

global (dmz) 1 interface

nat (inside) 1 192.168.0.0 255.255.0.0 0 0

nat (dmz) 1 192.168.168.0 255.255.255.0 0 0

where outside interface is IP 217.220.28.161 /27

and dmz interface is IP 192.168.168.1 /24

I have configured:

static (inside,outside) tcp 217.220.28.164 smtp 192.168.5.29 smtp netmask 255.255.255.255

static (dmz,outside) tcp 217.220.28.164 smtp 192.168.168.7 smtp netmask 255.255.255.255

access-list outside permit tcp any host 217.220.28.164 eq www

access-group outside in interface outside

.

After a "clear xlate" I see that from external (outside) the two inside/dmz servers IP are .161, yet.

Can I map two or more internal IP servers with the same public IP ? Is my configuration correct ?

Best Regards, Luca

[Patrick Iseli]

No you cannot Port Forward twice the same port (smtp) on two diffrent destinations.

By the way you also need to add a line into the access-list so that SMTP will be permited to the DMZ od the inside interface.

access-list outside permit tcp any host 217.220.28.164 eq smtp

To do that you need two diffrent public IP's.

sincerely

Patrick