PIX - how to define (bind) an acl to the dynamic ip address of an interface

[LOUIS BOUCHARD]

the outside ip address of my PIX is dynamicly assigned from my provider DHCP server.

is there a way to define and inbound acl to allow inbound traffic to go thru with port redirection.

my problem is that if my outside dynamic address change from 64.1.1.3 to something else, i am screwed !!!

access-list acl_out permit tcp any host 64.1.1.3 eq 8080

access-group acl_out in interface outside

static (inside,outside) tcp interface 8080 192.168.100.5 www netmask 255.255.255.255 0 0

[mmellet]

I don’t see a way to do it right now but if the ACL could act like an extended ACL and take hostnames, you could use DNS. Perhaps this would be a good idea for you to suggest to Cisco.

[belihe]

This works.

access-list 102 permit tcp any any eq www

access-group 102 in interface outside

static (inside,outside) tcp interface www 192.168.254.218 www netmask 255.255.255.255 0 0