To all PIX experts,
I have a PIX 515 running 6.3(3) software. Windows 2003 server (plan on using as FTP server) in the DMZ with private IP 192.168.17.100.
This private IP is statically nat to a public IP address 209.181.x.y. This public IP is different from the global public IP which is
209.181.a.b being use for NATing internal private-ip systems.Related entries are below:
nameif ethernet0 outside security0 nameif ethernet2 dmz security20 global (outside) 1 209.181.a.b netmask 255.255.255.248 nat (dmz) 1 192.168.17.0 255.255.255.0 static (dmz,outside) 209.181.x.y 192.168.17.100 netmask
255.255.255.255 0 0The issue is I cannot get outside (to the Internet) from this Windows
2003 server.If I change the IP of this Win 2003 server to 192.168.17.101 (no static here,NAT with public global ip) then it will work.
Any idea what I am missing...
BV