CISCO PIX 501

[RishMaster]

I have a CISCO PIX 501 and I want to take 1 external ip address and route it into private dhcp addresses. I also want to take my second IP address and pass it through to my web/ftp server. How do I do this? Can it be done without port forwarding?

 

[yizhar]

HI.

I think it can be done like this:

** Outbound traffic using "outside" interface ip **
global 1 interface
nat 1 0 0

** Inbound traffic **
static (inside,outside) x.x.x.x 10.0.0.1
access-list fromoutside permit tcp any host x.x.x.x eq www
access-list fromoutside permit tcp any host x.x.x.x eq ftp
access-group fromoutside in interface outside

Bye

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[RishMaster]

Thanks Yizhar. But I have TWO external IPs. One I want to pass through to the server, and the other I want to NAT for the internal network via DHCP.

Rishi.

 

[yizhar]

HI.

In addition to what I mentioned, you can use DHCPD commands.

RTFM

Good Luck
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[RishMaster]

I am so lost... I don't understand too much about how to configure Cisco PIX's. What are the line commands I'd use from start to finish?

Thank you so much.

 

[yizhar]

HI.

Check out the following:

Follow the configuration guides here:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix

Have you tried using PDM - it can help you.

This is my utility, it can help you get the pix up and running quickly, but it does not support all the options:

http://teachers.sivan.co.il/yizhar#pixcript

Bye

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[RishMaster]

Thanks. I haven't loaded the PDM onto my PIX because I do not have the file.

Can you mail it to me at rishi@interbaun.com?

Rishi.

 

[yizhar]

HI.

I cannot send you the PDM file, but as far as I know the pix 501 comes preloaded with PDM.

Have you read the manuals?

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[RishMaster]

Yes, I have read the manuals and mine did not come with one. Can you send it? Just email it to: rishi@interbaun.com.

Thanks.