question? mapping different ports on different machines to a NAT address

[mtoung]

let say i have 2 internal machines serving 2 services:

ftp server 129.2.2.1

web server 129.2.2.2

now i want to use only 1 external ip (lets say 64.5.5.5) to host those 2 services. how do i set a access-list, global map, or static map so that the pix will route all port 21 traffic going to 64.5.5.5 into the ftp server, while routing all port 80 traffic going to the 64.5.5.5 address to the web server machines?

now, cheaper firewall (like linksys or sonicwall) have this capability, so im assuming that the pix should have it also, i just cant find it...

any help will be appreciated....you can either reply or just email mtoung@yahoo.com

thx

mark

[thomas.waddell]

Mark,

Sounds like you are describing Port Redirection. This has been added to the PIX Software version 6.0. Which version are you running?

If you have 6.x, use the STATIC command to enable this feature. Check docs for exact syntax.

Hope this helps,

-Thomas

[mtoung]

thomas,

thx for the info..im running 5.3, ill upgrade to 6 to see if that will do what i want...

m