Cisco PIX Static NAT

[Beefcake35]

Hi, I have a cisco pix configured and I have a static nat built from a pub ip to a private ip sitting on a web server. I need to get http access to the web server on port 8081 and I am a bit unsure how to do that. I am able to ssh and ping it so I know my static nat policy is correct.

Thanks a bunch in advance.

 

[Beefcake35]

I forgot to add.
I currently have a static statement of
static (inside,outside) 1.2.3.4 192.168.2.13 netmask 255.255.255.255
I am using that currently for ssh. Is it possible to somehow add a static tcp entry something like
static (inside,outside) tcp 1.2.3.4 8080 192.168.2.13 8081 netmask 255.255.255.255 0 0 for web access?

Thanks

 

[unclerico]

yes, you can do that. Be sure to add in your matching ACE in your ACL permitting outside traffic inbound.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[Beefcake35]

Thanks, this command conflicts with my current static nat command. I currently have all ip traffic opened to this 192.168.2.13 address. I can ping it and ssh to it but I cannot http to it. I watch the logs and it looks like its building it correctly and allowing it through.

 

[unclerico]

can you post your scrubbed config??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)