PIC 501 Redirect IP

Hello I have 2 PIX 501 i want to move 1 emial server from 1 place to another can i redirect IP? for example old IP was 80.80.80.80 and new is 90.90.90.90 (in different location) It ist possible?

object-group service tcp_mail tcp description tcp portts for email port-object eq www port-object eq https port-object eq pop3 port-object eq smtp access-list outside_access_in permit tcp any host 80.80.80.80 object-group tcp_mail static (inside,outside) 80.80.80.80 80.80.80.80 netmask 255.255.255.255 0 0

Thank you Robert

Reply to
Robert
Loading thread data ...

clear xlate no static (inside,outside) 80.80.80.80 80.80.80.80 netmask 255.255.255.255 0 0 static (inside,outside) 90.90.90.90 90.90.90.90 netmask 255.255.255.255 0 0

Take note of the position of old rule in the outside_access_in ACL

no access-list outside_access_in permit tcp any host 80.80.80.80 object-group tcp_mail access-list outside_access_in line permit tcp any host 90.90.90.90 object-group tcp_mail

access-group outside_access_in in interface outside

What does "in different location" mean?

Alex

Reply to
AM

Thank you in different location means - at the moment mail server is in Datacenter we want to move inhouse (do not ask me why - company deicided) i created another MX record pointed to new IP but some of the users will forgot (likke always) to change SMTP/POP3 servers that is the reason wy i want to redirect IPs

datacenter IP's are (for example) 80.80.80.80 and office 90.90.90.90

The problem is that PIX in datacenter has no access to 90.90.90.90 network that is i am worried about static (inside,outside) 90.90.90.90 90.90.90.90 netmask 255.255.255.255 0 0 but i will try

Thanks again Robert

Reply to
Robert

If you mean that you want incoming traffic to 80.80.80.80 to be redirected to the external IP address 90.90.90.90 [at your other site], then the answer is NO. The PIX 501 will never send traffic back out the same interface it was received on, so the incoming 80.80.80.80 cannot be redirected out that interface back to the internet for delivery to 90.90.90.90 .

Reply to
Walter Roberson

ok I will have to change DNS record and point to specific IP (it they will forget) Thank you Walter

Regards Robert

Reply to
Robert

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.