Pix Output Analysis Question

[Thomas Reiling]

I ran the Output Interpreter on our 506e and got the following:

WARNING: The IP address, 6x.172.214.193, of the 'outside' interface overlaps with

the static defined by:

     'static (inside, outside) 6x.172.214.193 10.2.28.3 netmask 255.255.255.255'.

Can someone please tell me what this means exactly and how I might resolve it?

Thank you,

Thomas

[Federico Coto Fajardo · Accepted solution]

Hi,

The problem is that you're attempting to use the same IP address on the outside interface of the PIX and on a static command. You cannot do that.

The reason this is an error is because the PIX will not know if the traffic is intended to itself or it should redirect the traffic to the private IP.

The fix is to create a static with port redirection... for example if you need to access the server via web do this:

no static (inside, outside) 6x.172.214.193 10.2.28.3 netmask 255.255.255.255

static (inside, outside) tcp 6x.172.214.193 80 10.2.28.3 80 netmask 255.255.255.255

Federico.