Do I need a second static address for a web server?

[ideasworking]

Hello,

I think I know the answer but I want to be sure. Is it absolutely necessary to have a second static address for an internal web server?

What I would like to do is simply redirect port 80 requests on the PIX to the internal web server 192.168.1.1

Can I do this?

Thanks,
Lou

 

[wirelesspeap]

static (inside,outside) tcp interface 80 192.168.1.1 80 netmask 255.255.255.255

access-list External permit tcp any interface eq 80
access-group External in interface outside

 

[Triplejolt]

Yes, you need to "translate" your internal address to an external one. This is because the address you mention is from the private address-range and is not routed or reachable from the Internet. You need to provide a public address, or a second address if you will. Unless you have a public address-range to choose an address from, you need to use the one provided by your "outside" PIX interface.
See above for configuration examples

A firm beleiver of the "Keep it Simple" philosophy
Cheers
/T