Static NAT Help (506E) 2

[hise]

Hi:

I've had a task dumped on me (a programmer) that was started by someone who is no longer available. I've gotten together my game-plan based on Cisco documentation only to find out it's apprently done already in the PIX 506E. However, I need help double-checking this info.

Objective:
To permit HTTP traffic going to 65.175.63.107 to an internal IP of 192.168.1.39.

Current Relevant Firewall info:
static (inside,outside) 65.175.63.107 192.168.1.39 netmask 255.255.255.255 0 0

access-list 100 line 6 permit tcp any host 65.175.63.107 eq

http://www (hitcnt=10)

access-group 100 in interface outside

There is additional displayed when I run show access-list, but I don't know if it's important.

When I try to hit that public IP from the outside, it just times out.

Any help would greatly be appreciated!!!!

Thanks,

Jeremy

 

[boymarty24]

Can you remove your .38 for testing purpose!?

 

[hise]

Yes. How would I got about testing? Just remove it and see if it works?

 

[boymarty24]

Yup

 

[hise]

Ok. Well I did ifconfig down eth0:1

Now when I do an nmap from an external site, I do get back that http on 80 is open. Great! I didn't have this response before. However, I'm still not able to get in. Thank's so much for getting me one step closer!

Any ideas?

Thanks!

 

[hise]

Hi Folks:

So this is where I am:

I can't access this from within the network. However, I can from outside the network. That would make sense right? Could you tell me what path I would go down to try to figure out how enable this?

Thanks VERY much for helping me out. You've made this possible.

THANKS!

 

[boymarty24]

I can also access this. But typing the external IP from your lan will not work, if this is what you tried.

You can try the alias command, this will solve that issue for you, check the command reference

http://www.cisco.com/en/US/products...s_command_reference_book09186a008017284e.html