Accessing private host

[jamiesachs]

Is there a way to have one of my internal (private IP) accessable from the external PIX interface by the internal IP number. I will not be trying to route this address.

Thanks

[gfullage]

Sure, just translate the address to itself. If the inside host is say, 10.1.1.1, just do:

static (inside,outside) 10.1.1.1 10.1.1.1 netmask 255.255.255.255

clear xlate

As you said, you won't be able to route to it over the Internet, but you'll be able to get to it from just outside the PIX. Be aware though, this host will now always be translated to 10.1.1.1 when it sends traffic outbound, so it will also no longer be able to access anything on the Internet.

[jamiesachs]

Thanks

This should have been obvious. One more thing. I want replicate WINS with a server connected to the outside interface. I created three conduits to my private address for 139, netbios-dgm, and netbios-ns but the PIX is not passing WINS traffic. any suggestions on this. Thanks again