Help with using multiple external IPs (506e)

[fraustbyte]

I have multiple external IP addresses that I want translated to multiple internal IP addresses (multiple web servers) and I'm having trouble getting it to work for anything but a single external address. What do you need to configure to do this?

 

[brianinms]

You need a static and an access-list.

static (inside,outside) pubicip privateip netmask 255.255.255.255


access-list ACLNAME permit tcp any host pubicip eq 80

 

[fraustbyte]

Ok thanks. I think I have that part covered. What should my "global" configuration look like?

 

[brianinms]

Depends on how you want to configure nat

 

[fraustbyte]

Never mind, I figured it all out. My configuration was OK on the PIX. As it turns out I had an issue with the second web server and didn't even think to consider something other than the PIX was the problem. I resolved the web server issue and have access externally (using different external ip addresses) to both internal web servers.

Thanks anyway.

((By the way my global statement is: 'global (outside) 1 interface'. I'm assuming this allows the use of PAT - Port Address Translation for all outbound traffic. Everything works as I require.))

 

[brianinms]

Yes your understanding of the global statement is correct.