PIX 506e and PC Anywhere

[LonC25]

I have PC anywhere working to one machine, but I would like to know if I can set my PIX up to accept a connection from the outside and have it look for any machines waitiong for a PC Anywhere connection on my network.

I other words I would like to be able to come in from outside and have the ability to access multiple machines.

Here is what I have so far.


global (outside) 1 ???.???.74.135-208.137.74.158 netmask 255.255.255.0
global (outside) 1 ???.???.74.134
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) ???.???.74.133 192.168.1.10 netmask 255.255.255.255 0 0
static (inside,outside) ???.???.74.132 192.168.1.14 netmask 255.255.255.255 0 0
static (inside,outside) interface 192.168.1.123 netmask 255.255.255.255 0 0
conduit permit icmp any any
conduit permit tcp host ???.???.74.133 eq pop3 any
conduit permit tcp host ???.???.74.133 eq smtp any
conduit permit tcp host ???.???.74.133 eq 143 any
conduit permit tcp host ???.???.74.133 eq

http://www any

conduit permit tcp host ???.???.74.133 eq 443 any
conduit permit tcp host ???.???.74.133 eq 563 any
conduit permit tcp host ???.???.74.132 eq 1723 any
conduit permit gre host ???.???.74.132 any
conduit permit tcp any eq 5631 any
conduit permit tcp any eq 5632 any
conduit permit gre any any
route outside 0.0.0.0 0.0.0.0 ???.???.74.129 1

Let me know

 

[yizhar]

HI.

> conduit permit tcp any eq 5632 any
As far as I know it should be UDP 5632 instead of TCP, in addition to TCP 5631. Isn't it so?

You can remove this line:
> global (outside) 1 ???.???.74.135-208.137.74.158
Mixing PAT and NAT makes management and troubleshooting more dificult, because the same workstation might get NAT address today, and PAT tomorrow.
And now you get 4 additional ip addresses to play with or future use.

Now choose one of 2 options:
1) Use static for each workstation that needs PCAW connectivity.

2) Use VPN to access the internal network, and PCAW over the VPN tunnel using internal IP addresses.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar