I have a Pix configuration with a single host on the inside interface that needs access to a single host on the outside interface (FTP services). The real address of the outside host is 172.19.75.245. I need the host on the inside to access this address as if it were 10.100.3.245. How would I acomplish this. My config right now looks like this.
PIX Version 6.3(3)
interface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
names
name 172.19.75.245 BotWFTPServer
object-group service BoWFTPServer tcp
port-object eq ftp-data
port-object eq ftp
access-list inside_access_in permit tcp host 10.100.17.68 host 10.100.3.245 object-group BoWFTPServer
ip address outside 10.100.2.1 255.255.255.0
ip address inside 10.100.17.1 255.255.255.0
pdm location 10.100.17.68 255.255.255.255 inside
pdm location BotWFTPServer 255.255.255.255 outside
static (outside,inside) 10.100.3.245 BotWFTPServer netmask 255.255.255.255 0 0
access-group inside_access_in in interface inside
route outside BotWFTPServer 255.255.255.255 10.100.2.2 1
timeout xlate 3:00:00
This is only part of the config but addresses my above requirement I think. This was configured with the PDM.
Will this work properly? Is there a better way to accomplish this?
