Networks

Ask something
Discussion Locked

PIX configuration

0 helpful
5 replies

by samprav

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
I have a PIX firewall and one GLobal IP .three servers are behind the firewall in a company LAN one is web server,one is mail server and another is ERP server now i do want to access these servers from the internet can i do that by using the one IP on the PIX.If yes what will be the technique.
If tell me the commands also if posssible.

5 replies

by ron rs

The "static" command has no provision for mapping to specific port. You will require a public IP address for each server. Speak to your ISP to try and negotiate the additional addresses. You may have to change ISP's as not all will supply more addresses or they may charge a premium for this. Be prepared to shop.
Ron

by some guy in seattle

From cisco.com (http://www.cisco.com/warp/public/110/pixfaq.shtml) (read the last line):

Q. Can I map a single, inside address to more than one outside address?

A. The Cisco Secure PIX Firewall only allows a single one-to-one translation for a local (inside) host. If you have more than two interfaces on the Cisco Secure PIX Firewall, you can translate a local address to different addresses on each respective interface but only one translation per interface is allowed for each address. Likewise, you cannot do a static mapping of a single outside address to multiple local addresses.

This discussion is closed to new replies.