Help plz, how do I map 129.34.11.12 port 81 to 10.5.1.3 port 81

[yuina]

Hi I need people to type

http://129.34.11.12:81

to be directed to 10.5.1.3 port 80
basically to an internal web server.

how do I do that?
I tried this but didnt work
static (inside,outside) tcp 129.34.11.12 81 10.5.1.3 80 netmask 255.255.255.255 0 0

Thank you

 

[Supergrrover]

Your static is correct, but you also need to add that to your inbound ACL

access-list outside_in permit tcp any host 129.34.11.12 eq 81



Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[yuina]

Hi Supergrrover

I followed what you said but I still cant connect to a webserver 10.5.1.3 port 80

here what I have

access-list outside_in permit tcp any host 129.34.11.12 eq 81
access-list outside_in permit tcp any host 129.34.11.12 eq 80
static (inside,outside) tcp 129.34.11.12 81 10.5.1.3 80 netmask 255.255.255.255 0 0 (it is not working)
static (inside,outside) tcp 129.34.11.12 80 10.5.1.2 80 netmask 255.255.255.255 0 0 (it is working for this)
----------------------------
do I need
conduit permit tcp host 129.34.11.12 eq 81 any?

Thankkss

 

[geo2500]

what you are doing is Port Redirection. You 'd better look at the manuals or at cisco's website for the proper way of doing it.

 

[Supergrrover]

When you put in the new static it should have given you an error. You can't have 2 mappings to the same port/IP on the inside. Try removing the static that has 80 to 80 and see if your 81 works after that.
You can have the webserver listen on port 81 as well and that will go around the problem.


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[yuina]

actuatlly they are mapping to two different Ports/IPs on the inside.
I rebooted the pix and it worked, that was the problem
Thanks a bunch for your help, I really appreciate it.