cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
730
Views
0
Helpful
2
Replies

Publish webserver pix 501

david.kordyban
Level 1
Level 1

The remote office is connected to hq via site to site vpn. I have 1 static IP (on the remote site)that I use for the site to site. I need to publish a web server at the remote site.

My question is can I use the same IP for VPN and web server publishing, I am having trouble getting the web server to publish

see attachment

Thanks for your time

1 Accepted Solution

Accepted Solutions

JORGE RODRIGUEZ
Level 10
Level 10

Hi,

Sure you can use the same public IP of your outside interface for port forwarding , you just need  to apply the inbound acl  to your outside interface


add the line bellow to your config  and try www


access-group inbound in interface outside

if no joy you can try changing the acl to reflect outside keyword instead of public IP


example:

access-list inbound  permit tcp any interface outside eq www

and remove the old one ( no access-list inbound permit tcp any host 74.94.2yy.xxx eq www )

Regards

Jorge Rodriguez

View solution in original post

2 Replies 2

JORGE RODRIGUEZ
Level 10
Level 10

Hi,

Sure you can use the same public IP of your outside interface for port forwarding , you just need  to apply the inbound acl  to your outside interface


add the line bellow to your config  and try www


access-group inbound in interface outside

if no joy you can try changing the acl to reflect outside keyword instead of public IP


example:

access-list inbound  permit tcp any interface outside eq www

and remove the old one ( no access-list inbound permit tcp any host 74.94.2yy.xxx eq www )

Regards

Jorge Rodriguez

That worked perfectly. Thanks a lot.