Hello, I am fairly new to this PIX firewall configuration, but I am willing to get my hands dirty and I am fairly confortable working around in it. It was installed here where I work before I came.
What I am wondering is if it is possible to have 1 external ip address to be used by different parties(vendors).. What I need to do is make it so our software vendors can access the servers in which their software is ran for maintenance.
Each server obviously has their own ip address, lets call them 192.168.1.3, 192.168.1.4, and 192.168.1.5. Our single external ip address lets say is 207.212.30.54. For one of them I need to use PCanywhere (because it is a w2kbox and Remote desktop is a no-no because 2k dosent allow your local drives to be seen), but is absolutely adequate for the other two w2k3 boxes.
here are the commands so far that I have been using to get this accomplished but to no avail.
For PCAnywhere
static (inside,outside) tcp 207.212.30.54 5631 192.168.1.3 5835 netmask 255.255.255.255
static (inside,outside) tcp 207.212.30.54 5632 192.168.1.3 5836 netmask 255.255.255.255
access-list 120 permit tcp any host 207.212.30.54 eq 5631
access-list 120 permit udp any host 207.212.30.54 eq 5632
For Windows Remote Desktop to another server..
static (inside,outside) tcp 207.212.30.54 3389 192.168.1.4 3389 netmask 255.255.255.255
access-list 120 permit tcp any host 207.212.30.54 eq 3389
..and say for the other 2003 box, how would i change the port to say..
static (inside,outside) tcp 207.212.30.54 6325 192.168.1.5 6325 netmask 255.255.255.255
access-list 120 permit tcp any host 207.212.30.54 eq 6325
I know this is a mouthfull, but I am trying to learn this thing, and I have spent countless hours online trying to figure out a solution to no avail.
Is what I am trying to do possible, and if so how?
Thank you to anyone who can help..