Solved

Changing  a port forward on a pix firewall, HELP!

Posted on 2004-08-25
3
374 Views
Last Modified: 2013-11-16
Hello all, I am going to be on site babysitting a network this week and I have to change 1 thing on a pix firewall but have limited background when it comes to pix firewall.

All I have to change is one portforward here is what I have to change

Port 80 is currently pointing at 192.168.1.200
and I have to change it to point at 192.168.1.201

Can somone give me a crash course?  Or help me out in anyway? I would greatly apreciate it.  I have a computer connected to the console port on the back of the unit and logged in.
0
Comment
Question by:janderson2k
  • 3
3 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 250 total points
ID: 11893164
There should be a static translation looks something like this in the config:

static (inside,outside) tcp <public ip> www 192.168.1.200 netmask 255.255.255.255 0 0

To change it, you need to clear all xlates, add a new one, then remove the old one, and clear xlates again, and save it:

pix#config term
pix(config)#clear xlate
pix(config)#no static (inside,outside) tcp <public ip> www 192.168.1.200 netmask 255.255.255.255 0 0
pix(config)#static (inside,outside) tcp <public ip> www 192.168.1.201 netmask 255.255.255.255
pix(config)#clear xlate
pix(config)#exit
pix#writ mem

0
 
LVL 79

Expert Comment

by:lrmoore
ID: 12092756
Are you still working on this? Do you need more information?
Can you close out this question?
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 13703129
How's it going? Have you found a solution? Do you need more information?
Can you close this question?

http://www.experts-exchange.com/help.jsp#hs5

Thanks for attending to this long-forgotten question.

<-8}
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now