Static policy PAT on PIX

Colin Higgins · ‎08-31-2016

OK, here is what I need to do, but I am not sure it can be done on an old PIX

I have 2 servers: one needs to send FTP outbound to various addresses through the PIX, and the other needs to receive FTP transmissions from these same servers. In other words, one server sends, the other receives, but they use the same address.

is this possible? How can I do it?

Colin Higgins · ‎08-31-2016

so let's say I have servers on the 172.25.87.132 /27 network that need to connect outbound on port tcp 21

I also have a server off another interface on the PIX (we will call it acme) that needs to receive inbound ftp.

Will this configuration work

global (outside) 1 172.33.3.150 netmask 255.255.255.255
nat (inside) 1 172.25.87.132 255.255.255.224

hostname(config)# static (acme,outside) tcp 172.33.3.150 ftp 172.29.89.55 ftp netmask
255.255.255.255

with an ACL allowing FTP to 172.33.3.150 ?