Remote desktop on two servers at the same LAN

I have one PIX 501 and two windows servers. On the outside on the PIX it has an public IP. On the inside it has the IP 192.168.1.1 and this is the gateway for my two servers, placed on: 192.168.1.2 & 192.168.1.3.

I want to be able to access the two servers with remote desktop. It works fine for one of them (192.168.1.2).

I have this config: access-list allow_inbound permit tcp host 2xx.xx.42.x interface outside eq 3389 static (inside,outside) tcp interface 3389 192.168.1.2 3389 netmask

255.255.255.255 0 0

Typing my public IP I can access 192.168.1.2.

But, I also want to be able to connect 192.168.1.3 from my public IP. I have made this config: access-list allow_inbound permit tcp host 2xx.xx.42.x interface outside eq 3390 static (inside,outside) tcp interface 3390 192.168.1.2 3389 netmask

255.255.255.255 0 0

Typing :3390 does not work :-( I was hoping to access the 192.168.1.3...

I know remote desktop works on 192.168.1.3... it must have something to do with the PIX, but what?

Best Regards Martin

Reply to
Martin
Loading thread data ...

You used the same internal IP destination on both static statements,

192.168.1.2 in both.
Reply to
Walter Roberson

which version do you have, looks like it doesn't support PAT

M
Reply to
mak

Hi Walter,

I made an error typing this question, the second should of course be

192.168.1.3.

It does not work :-( Are the two lines correct ?

Regards Martin

Reply to
Martin

This is my version data:

Cisco PIX Firewall Version 6.3(5) Cisco PIX Device Manager Version 3.0(4)

Compiled on Thu 04-Aug-05 21:40 by morlee

PIX1 up 2 days 14 hours

Hardware: PIX-501, 16 MB RAM, CPU Am5x86 133 MHz Flash E28F640J3 @ 0x3000000, 8MB BIOS Flash E28F640J3 @ 0xfffd8000, 128KB

Reply to
Martin

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.