1)    nat (inside) 1 10.10.10.2 255.255.255.255
        nat (inside) 2 0 0
        global (outside) 1 205.11.22.9
        global (outside) 2 interface

if you are using 205.11.22.9 as outside ip address of the PIX, then
just:
nat (inside) 1 0 0
global (outside) 1 interface

2) You have to have static, if connection is being initiated from the
outside:
        static (inside,outside) tcp 205.11.22.9 80 10.10.10.2 80 netmask
255.255.255.255

3) Allow port 80 traffic from outside:
        conduit permit tcp host 205.11.22.9 eq 80 any
or if you are using acl:
        access-list name permit tcp any host 205.11.22.9 eq 80

Port Redirection with Statics
http://www.cisco.com/warp/public/707/28.html#port

-- Lidiya White

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
John Green
Sent: Monday, April 01, 2002 10:58 AM
To: [EMAIL PROTECTED]
Subject: pix: static translation how to ? [7:40044]

INTERNET
        |
        | 205.11.22.9 
       PIX
        | 10.10.10.1 
 -------------------------------  
  |           |             |
  |           |             |
10.10.10.2   10.10.10.3   10.10.10.4
WEB SERVER     host          host

requirement : web server running at 10.10.10.2 at port
80 should be accessible by users on the internet, they
connect to 205.11.22.9:80 instead.

what should be the nat/global statements for such a
scenario ?


__________________________________________________
Do You Yahoo!?
Yahoo! Greetings - send holiday greetings for Easter, Passover
http://greetings.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=40114&t=40044
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to