• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1065
  • Last Modified:

How can we configure NAT and DNAT on pix 515E?

How can we configure NAT and DNAT on pix 515E.?

How can i permit access to inbound and outbound packets on web server (192.168.2.1)

ethernet2 outside1 connect to WAN IP 212.42.x.114 MASK 255.255.255.248 GW:212.42.x.113)
ethernet1 inside connect to LAN IP (192.168.1.1 MASK 255.255.255.0)
ethernet5 DMZ_web connect to LAN IP (192.168.2.1 MASK 255.255.255.0)


Web
212.42.x.115:80 to 192.168.2.2 port 80
and  Ftp
212.42.x.115:21 to 192.168.2.2 port 21
212.42.x.115:20 to 192.168.2.2 port 20

0
Jak0
Asked:
Jak0
1 Solution
 
asavenerCommented:
Web
212.42.x.115:80 to 192.168.2.2 port 80
and  Ftp
212.42.x.115:21 to 192.168.2.2 port 21
212.42.x.115:20 to 192.168.2.2 port 20




static (inside,outside) tcp 212.42.x.115 80 192.168.2.2 80 1024 512
static (inside,outside) tcp 212.42.x.115 21 192.168.2.2 21 1024 512

access-list NAT1 extended permit host 192.168.2.2 any eq 20

access-list NAT2 extended deny host 192.168.2.2 any eq 20
access-list NAT2 extended permit any any

global (outside) 1 212.42.x.115
global (outside) 2 interface

nat (inside) 1 access-list NAT1
nat (inside) 2 access-list NAT2
 
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now