khaledeshah
ISP
Hi
I have a PIX506 5.2 & I want to put my LAN behind it & also a server
so I add the following :
nat (inside) 1 0 0
global(outside) 1 interface
dhcpd address 192.168.1.128-192.168.1.137
dhcpd dns x.x.x.x
dhcpd enbale
to let my LAN connect to INTERNET
Now I want to outsiders connect to my WEB server
static (inside,outside) x.x.x.x 192.168.1.10 netmask 255.255.255.255
where x.x.x.x is the outside interface address
access-list acl_out permit tcp any host x.x.x.x eq www
access-group acl_out in interface outside
but what I get is that if my LAN connect first to the INTERNET, the outsiders can't access my web server & if outsiders connect first to my web server, The LAN can't connect to the INTERNET
so What is wrong?
I have a PIX506 5.2 & I want to put my LAN behind it & also a server
so I add the following :
nat (inside) 1 0 0
global(outside) 1 interface
dhcpd address 192.168.1.128-192.168.1.137
dhcpd dns x.x.x.x
dhcpd enbale
to let my LAN connect to INTERNET
Now I want to outsiders connect to my WEB server
static (inside,outside) x.x.x.x 192.168.1.10 netmask 255.255.255.255
where x.x.x.x is the outside interface address
access-list acl_out permit tcp any host x.x.x.x eq www
access-group acl_out in interface outside
but what I get is that if my LAN connect first to the INTERNET, the outsiders can't access my web server & if outsiders connect first to my web server, The LAN can't connect to the INTERNET
so What is wrong?