Link to home
Start Free TrialLog in
Avatar of dissolved
dissolved

asked on

Help with PAT on PIX

Here is my network schematic:
http://www.streetneeds.com/uploads/ot/net.jpg

I am doing double NAT. Here's the problem:

I have a few hosts BEHIND the firewall, that need to be accessed publicly.  Is this possible?
I'm assuming I will only have to enter PAT statements in my firewall?

Here is what needs to be done:

192.168.4.5 needs to have tcp 80 and 25 forwarded to it  (webserver and mail server)
192.168.2.11 needs to have tcp 22 forwarded to it    (ssh server)

Thanks
ASKER CERTIFIED SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of dissolved
dissolved

ASKER

thanks!
On the pix...
static (inside,outside) tcp interface 25 192.168.4.5 25 netmask 255.255.255.255
  static (inside,outside) tcp interface 80 192.168.4.5 80 netmask 255.255.255.255
  static (inside,outside) tcp interface 22 192.168.2.11 22 netmask 255.255.255.255

Which one do I choose? inside or outside in the parenthesis? Or do I write it just as you did?
Thanks
You must enter it exactly as is, to include "(inside,outside)"
thanks man