cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
343
Views
0
Helpful
2
Replies

Outside Static nat with port redirection

ggozzi
Level 1
Level 1

I need help for this problem:

I have this configuration

| |

lan farm 10.10.10.0/24 sec lvl 60 | |lan lancse 10.15.32.251/20 lv80

----------------------------------------------| PIX 6.2.2|-----------------------------------------

In the lan farm I have a few server that listen http and https on different port

I have try to perform static outside port redirection but doesnt work

The static and acl are as follow:

static (lancse,farm) 193.41.84.64 193.41.84.64 netmask 255.255.255.192 0 0

static (lancse,farm) 10.15.16.0 10.15.16.0 netmask 255.255.240.0 0 0

static (lancse,farm) 10.15.32.0 10.15.32.0 netmask 255.255.240.0 0 0

static (lancse,farm) 10.15.58.0 10.15.58.0 netmask 255.255.255.0 0 0

static (lancse,farm) 10.15.96.0 10.15.96.0 netmask 255.255.240.0 0 0

static (lancse,farm) 10.15.49.200 10.15.49.200 netmask 255.255.255.255 0 0

static (lancse,farm) 10.15.48.0 10.15.48.0 netmask 255.255.255.0 0 0

static (farm,lancse) tcp 10.10.10.25 www 10.10.10.25 1080 netmask 255.255.255.255 0 0

static (farm,lancse) tcp 10.10.10.26 www 10.10.10.26 2080 netmask 255.255.255.255 0 0

static (farm,lancse) tcp 10.10.10.25 https 10.10.10.25 1443 netmask 255.255.255.255 0 0

static (farm,lancse) tcp 10.10.10.65 https 10.10.10.25 2443 netmask 255.255.255.255 0 0

static (farm,lancse) tcp 10.10.10.195 https 10.10.10.195 3443 netmask 255.255.255.255 0 0

static (farm,lancse) tcp 10.10.10.196 https 10.10.10.196 4443 netmask 255.255.255.255 0 0

access-list farm_access_in permit ip 10.10.10.0 255.255.255.0 any

access-list farm_access_in permit icmp any any

access-list lancse_access_in permit icmp any any

access-list lancse_access_in permit ip any any

With debug packet on lan farm the packet arrive with destination port not traslated.

Can anyone help me?

thanks and regards

2 Replies 2

jmia
Level 7
Level 7

Hi,

Here's a cisco document that might help you out:

http://www.cisco.com/warp/public/707/28.html

Hope it helps -

Thanks

But in the document the port redirection is from inside to outside, in my case

is vice versa and the address is not natted remain the same.