Hi,
I have setup a PIX 501 in my lab, with a static nat to an internal test server. But I am unable to browse the internet from this server. I have removed the global (outside) interface and nat(inside)1 0 0 commands. I am not able to ping 4.2.2.2 from the server, but I can from the PIX. If i remove the static nat command and add the global and nat commands, I will be able to browse. What am I missing?
I have created access-lists as follows
ip address outside B.B.B.B 255.255.255.0
ip address inside A.A.A.A 255.255.255.0
access-list acl_out permit icmp any any echo-reply
access-list acl_out permit icmp any host A.A.A.A
access-list acl_in permit icmp host B.B.B.B any
access-list acl_in permit tcp any eq www
access-list acl_in permit tcp any any eq domain
access-list acl_in permit udp any any eq domain
access-list acl_in permit tcp any eq domain any
access-list acl_in permit udp any eq domain any
static(inside,outside) B.B.B.B A.A.A.a netmask 255.255.255.255 0 0
access-group acl_out in interface outside
access-group acl_in in interface inside
Thank you.Regards.
I have setup a PIX 501 in my lab, with a static nat to an internal test server. But I am unable to browse the internet from this server. I have removed the global (outside) interface and nat(inside)1 0 0 commands. I am not able to ping 4.2.2.2 from the server, but I can from the PIX. If i remove the static nat command and add the global and nat commands, I will be able to browse. What am I missing?
I have created access-lists as follows
ip address outside B.B.B.B 255.255.255.0
ip address inside A.A.A.A 255.255.255.0
access-list acl_out permit icmp any any echo-reply
access-list acl_out permit icmp any host A.A.A.A
access-list acl_in permit icmp host B.B.B.B any
access-list acl_in permit tcp any eq www
access-list acl_in permit tcp any any eq domain
access-list acl_in permit udp any any eq domain
access-list acl_in permit tcp any eq domain any
access-list acl_in permit udp any eq domain any
static(inside,outside) B.B.B.B A.A.A.a netmask 255.255.255.255 0 0
access-group acl_out in interface outside
access-group acl_in in interface inside
Thank you.Regards.