Actually the syntax on the conduit is a little off.. should be:
conduit permit tcp eq
conduit permit tcp host 192.168.1.222 any eq www
. although with 5.0 of the PIX IOS, they want you to use Access-lists
instead of conduit statments.. so your config would look like:
static (inside,outsid
You need the conduit to allow traffic to the outside global IP. Same with
the ACL. Not to the private address. Unless you are NAT'n on the outside
router ( why?) then the static would have to change. Also, your conduit is
wrong in syntax:
conduit permit tcp host eq 80 any
Kenny
""Russell
Hi,
I suppose these aren't the real addresses and the real addresses are
valid ones what actualy you did hear is allowed every one to reach those
addresses, but you need to disable the nat with NAT 0 command or if these
are the real addresses to use static nat statments.
I hope it helps..
]
To: [EMAIL PROTECTED], [EMAIL PROTECTED]
cc:(bcc: Abdul Mateen/Satyam)
Subject: RE: Static, Conduit question.
Hi,
I suppose these aren't the real addresses and the real addresses are
valid ones what actualy you did hear is allowed every one to reach those
addresses, but you ne
4 matches
Mail list logo