PIX Port Forwarding, single IP to many

[STBS]

Is a PIX capable of forwarding ports to different IPs with only one Public IP. In other words, I have a web server, an FTP server, and 2 TS servers (listening on different ports) running on different machines and I have only one public static address. Is this possible?

 

[baddos]

Yes... The PIX can do port forwarding with the "static" command.

 

[STBS]

Yes, but if I have a static from 216.30.70.1 to 192.168.1.1, I can't add another static from 216.30.70.1 to 192.168.1.2. I want to forward port 80 to 192.168.1.1 and 3389 to 192.168.1.2 using the same public IP.

 

[baddos]

You want to do port statics. It's only available in PIX OS 6.0 and above.

static (inside, outside) tcp interface

http://www 192.168.1.1

http://www 255.255.255.255

0 0
static (inside, outside) tcp interface 3389 192.168.1.2 3389 255.255.255.255 0 0

access-list 101 permit tcp any interface outside eq 80
access-list 101 permit tcp any interface outside eq 3389
access-group 101 in interface outside

 

[STBS]

I didn't realize you could do that. Thanks!