Static NATfrom inside to outside

Mar 16, 2006 4 Replies

Hi,



I need help in PIX configuration. Actually i had testing tool BUGZILLA in one of my servers and want to make it public so that everyone can use it



For this i have one public IP and want to do a static nat on it. I want if anyone open link "http://public ip /BUGTEST" it will automayically redirect to my server



Is that posible?



Can anyone tell me the correct configuration please.


Thanks CK-NET



Presuming you have PIX 6.2 or PIX 6.3:

access-list out2in permit any interface outside eq http access-group out2in in interface outside static (inside,outside) tcp interface http PRIVATEIP http

and check to be sure you haven't turned off the http fixup.

I am using PIX 6.3

And in inside my server's IP is 192.168.1.236.

Thanks CK-NET

Please include enough of the context of previous discussions so that people can figure out what is going on without having to refer back to the previous messages. Merv is the only regular poster who uses googlegroups extensively; for the rest of us, the previous messages are -not- "right there" to be referred to. Indeed, in one of the recent threads, two key posts in the thread never made it to the news server I use, and as context was not sufficiently quoted I am unable to be of assistance to them.

[PIX 6.3] [internal server address is 192.168.whatever] [simple request to forward http requests from the single public IP to the internal server]

Yes, you need static NAT in order to allow new connections to your internal server when it is not using a public IP internally. [If it did happen to be using a public IP internally, then static would still work fine, but there would also be one other command that could be used instead.]

Just substitute that 192.168 address in to the 'static' command that I showed

static (inside,outside) tcp interface http 192.168.x.x http

that together with the two other lines that I showed are all you need for your situation.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required