October 12, 2008 05:49am pdt

My Account

Top 15 Experts

Overall Top Experts

1lrmoore 2,051,343
2keith_ala... 1,081,507
3rsivanandan 340,794
4tim_holman 340,612
5calvinetter 305,130
6nodisco 213,125
7srikrishnak 210,854
8grblades 197,984
9carribeant... 160,647
10batry_boy 147,954
11Voltz-dk 147,614
12pruecons... 102,029
13stressedo... 97,372
14harbor235 92,176
15Cyclops3... 85,475

	[x] Attachment Details

One Public IP to different servers for different protocols Static mapping help

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.8

Zone: Network Software Firewalls

Tags: static, ip

I have a similar situation to this one:

http://www.experts-exchange.com/Security/Firewalls/Q_21310837.html?query=%22static+%28inside%2Coutside%29+tcp+interface+smtp%22&clearTAFilter=true

I have one public ip that I want to use for smtp and http. The smtp will be directed to a spam filter 172.16.0.23. The http will go to an OWA server at 172.16.0.21.

I have a PIX 515E - 6.3(3)

I have setup acls and statics as follows, but have had no luck getting this to work. It looks like all the traffic goes to 172.16.0.23 ( the filter). I can't seem to get the www and https to direct to the web server.

I also have other web servers that have their own statics, and this works fine for www/https at 172.16.0.17 and 172.16.0.2.

The public IP I am working with now is xx.xx.xx.54.

access-list 142 permit tcp any host xx.xx.xx.51 eq www
access-list 142 permit tcp any host xx.xx.xx.51 eq https
access-list 142 permit tcp any host xx.xx.xx.52 eq www
access-list 142 permit tcp any host xx.xx.xx.52 eq https
access-list 142 permit tcp any interface outside eq smtp
access-list 142 permit tcp any interface outside eq www
access-list 142 permit tcp any interface outside eq https

static (inside,outside) tcp interface smtp 172.16.0.23 smtp netmask 255.255.255.255 0 0
static (inside,outside) tcp interface www 172.16.0.21 www netmask 255.255.255.255 0 0
static (inside,outside) tcp interface https 172.16.0.21 https netmask 255.255.255.255 0 0
static (inside,outside) xx.xx.xx.51 172.16.0.2 netmask 255.255.255.255 0 0
static (inside,outside) xx.xx.xx.52 172.16.0.17 netmask 255.255.255.255 0 0
access-group 142 in interface outside

Any help on the commands I need to get this running would be appreciated!

	#	Title
	1	pix 506e: static (inside,outside)…
	2	Static/ACL with a dynamic outside int…
	3	Cisco Pix Static Route
	4	Pix 501 - can't pass traffic when …
	5	Changing Cisco Pix Static Route to RA…
	6	simple Cisco PIX ACL help.