dhcp client advice

[FestusMcShamus]

I've had problems with PAT to an inside server using a pix 501 version 6.2(2).
Is it better to use
static(inside,outside)interface 80 192.168.1.1 80
access-list 101 permit tcp actual public ip address 80 192.168.1.1 80
access group 101 in interface outside....

or use the actual public ip address instead of interface in the static statement

thanks for any advice!

 

[themut]

You should use the keyword interface on the static command and it would be:

static(inside,outside)tcp interface 80 192.168.1.1 80

On your ACL you should use the IP address

access-list 101 permit tcp any host <public-ip> eq 80

Check out the link below it is an excellent guideline:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aad.shtml