I'm setting up a PIX to allow inside/outside users to access the server in the DMZ. Whenever I try to access the DMZ server (192.168.252.100) in a browser it will not load. show xlate tells me it's doing PAT translation and ping successfully works from inside -> dmz server but HTTP traffic does not. Here's what I put into my config everything else is default:
!
hostname PIX-ABC
!
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50
!
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
!
ip address outside 209.153.180.2 255.255.255.0
ip address inside 192.168.253.254 255.255.255.252
ip address dmz 192.168.252.1 255.255.255.0
!
route outside 0.0.0.0 0.0.0.0 209.153.180.1
!
nat (inside) 1 192.168.0.0 255.255.0.0
nat (dmz) 1 192.168.252.0 255.255.255.0
!
global (outside) 1 209.153.180.5
global (dmz) 1 192.168.252.5
!
static (dmz,outside) 209.153.180.6 192.168.252.100
static (dmz,outside) 209.153.180.7 192.168.252.101
static (dmz,outside) 209.153.180.8 192.168.252.102
!
access-list acl_outside_to_webserver permit tcp any host 209.153.180.6 eq 80
access-group acl_outside_to_webserver in interface outside
!
hostname PIX-ABC
!
nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50
!
interface ethernet0 auto
interface ethernet1 auto
interface ethernet2 auto
!
ip address outside 209.153.180.2 255.255.255.0
ip address inside 192.168.253.254 255.255.255.252
ip address dmz 192.168.252.1 255.255.255.0
!
route outside 0.0.0.0 0.0.0.0 209.153.180.1
!
nat (inside) 1 192.168.0.0 255.255.0.0
nat (dmz) 1 192.168.252.0 255.255.255.0
!
global (outside) 1 209.153.180.5
global (dmz) 1 192.168.252.5
!
static (dmz,outside) 209.153.180.6 192.168.252.100
static (dmz,outside) 209.153.180.7 192.168.252.101
static (dmz,outside) 209.153.180.8 192.168.252.102
!
access-list acl_outside_to_webserver permit tcp any host 209.153.180.6 eq 80
access-group acl_outside_to_webserver in interface outside