PAT

[gio9779]

I currently have a PAT on a public ip it is currently translating all internal to external traffic.

I have been told that I can use this public ip to translate incoming traffic aswell for example I can make it translate incoming traffic on port 5000 to a machine on my internal network on another port.

I was under the impression this could not be done that I would have to setup another public ip with a NAT for that machine and then do a port redirect.

anybody who knows please help.

currently using a PiX 515

[rais]

This is possible with release 6.0 and up, using 'static' command:

static (inside,outside) tcp 1.1.1.1 5000 10.1.1.1 23 netmask 255.255.255.255 0 0

Even if 1.1.1.1 is a PATed external address, connection to this address on port 5000 from outside, will be sent to inside machine 10.1.1.1 port 23. Also, make sure that your access-list allows connections at port 5000 to 1.1.1.1 from outside.

Hope this helps.