Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

HTTP traffic unable to go through PIX

Status
Not open for further replies.

Scrumfest

Technical User
Aug 2, 2006
2
0
0
CA
I'm setting up a PIX to allow inside/outside users to access the server in the DMZ. Whenever I try to access the DMZ server (192.168.252.100) in a browser it will not load. show xlate tells me it's doing PAT translation and ping successfully works from inside -> dmz server but HTTP traffic does not. Here's what I put into my config everything else is default:

!
hostname PIX-ABC
!
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50
!
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
!
ip address outside 209.153.180.2 255.255.255.0
ip address inside 192.168.253.254 255.255.255.252
ip address dmz 192.168.252.1 255.255.255.0
!
route outside 0.0.0.0 0.0.0.0 209.153.180.1
!
nat (inside) 1 192.168.0.0 255.255.0.0
nat (dmz) 1 192.168.252.0 255.255.255.0
!
global (outside) 1 209.153.180.5
global (dmz) 1 192.168.252.5
!
static (dmz,outside) 209.153.180.6 192.168.252.100
static (dmz,outside) 209.153.180.7 192.168.252.101
static (dmz,outside) 209.153.180.8 192.168.252.102
!
access-list acl_outside_to_webserver permit tcp any host 209.153.180.6 eq 80
access-group acl_outside_to_webserver in interface outside
 
ip address inside 192.168.253.254 255.255.255.252

This subnet mask tells the PIX that you only have one PC on your LAN. Do you have a route inside command to another subnet? Can you post your entire config, so we can see where access-lists are applied?
 
Hey I figured out the problem and got it all hammered out and working. Thanks anyways :)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top