04-30-2003 05:00 AM - edited 03-09-2019 03:06 AM
I need help for this problem:
I have this configuration
| |
lan farm 10.10.10.0/24 sec lvl 60 | |lan lancse 10.15.32.251/20 lv80
----------------------------------------------| PIX 6.2.2|-----------------------------------------
In the lan farm I have a few server that listen http and https on different port
I have try to perform static outside port redirection but doesnt work
The static and acl are as follow:
static (lancse,farm) 193.41.84.64 193.41.84.64 netmask 255.255.255.192 0 0
static (lancse,farm) 10.15.16.0 10.15.16.0 netmask 255.255.240.0 0 0
static (lancse,farm) 10.15.32.0 10.15.32.0 netmask 255.255.240.0 0 0
static (lancse,farm) 10.15.58.0 10.15.58.0 netmask 255.255.255.0 0 0
static (lancse,farm) 10.15.96.0 10.15.96.0 netmask 255.255.240.0 0 0
static (lancse,farm) 10.15.49.200 10.15.49.200 netmask 255.255.255.255 0 0
static (lancse,farm) 10.15.48.0 10.15.48.0 netmask 255.255.255.0 0 0
static (farm,lancse) tcp 10.10.10.25 www 10.10.10.25 1080 netmask 255.255.255.255 0 0
static (farm,lancse) tcp 10.10.10.26 www 10.10.10.26 2080 netmask 255.255.255.255 0 0
static (farm,lancse) tcp 10.10.10.25 https 10.10.10.25 1443 netmask 255.255.255.255 0 0
static (farm,lancse) tcp 10.10.10.65 https 10.10.10.25 2443 netmask 255.255.255.255 0 0
static (farm,lancse) tcp 10.10.10.195 https 10.10.10.195 3443 netmask 255.255.255.255 0 0
static (farm,lancse) tcp 10.10.10.196 https 10.10.10.196 4443 netmask 255.255.255.255 0 0
access-list farm_access_in permit ip 10.10.10.0 255.255.255.0 any
access-list farm_access_in permit icmp any any
access-list lancse_access_in permit icmp any any
access-list lancse_access_in permit ip any any
With debug packet on lan farm the packet arrive with destination port not traslated.
Can anyone help me?
thanks and regards
04-30-2003 05:23 AM
Hi,
Here's a cisco document that might help you out:
http://www.cisco.com/warp/public/707/28.html
Hope it helps -
04-30-2003 05:51 AM
Thanks
But in the document the port redirection is from inside to outside, in my case
is vice versa and the address is not natted remain the same.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide