Setting up FTP server behind PIX

[rburke]

Ok, my question is this:

Right now I have a Linksys Cable/xDSL 4-port router, that has the option to specify certain ports to certain internal IP's. I have normal residential cale service, which mean that I only get one real IP via DHCP. My question, is it possible to do the same kind of thing with a PIX 501 or 506?

ie. all requests on port tcp 21 get directed to NAT IP 192.168.1.x

I know how to do it using the static and conduit or access-list commands if I have multiple real IP's, but I'm just a student, no money for that. Please let me know if anyone has any ideas?

burke

 

[yizhar]

HI.

Yes, it can be done with the pix using the version 6.x
You can use the STATIC command with TCP parameter to define mapping for a specific port only.

If your pix is behind the DSL router, and the router has 1 registerd ip address but supports several internal addresses (so both pix and router do NAT in that case), then you have 2 options:

A) Define virtual ip addresses for each internal server, use port mapping on the DSL router to point to those virtual addresses, and at the pix use the "normal" STATIC command to map those addresses to the internal ip address of the server.

B) At the DSL router, map all needed ports to the pix outside interface, and at the pix use STATIC TCP to map each port to the correct server.

I would go with option A as first alternative.

But if you have an option that the pix will get in some way the registered ip address on the outside interface, and only the pix will NAT, this is preffered.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[rburke]

Ok, if my global IP(outside interface) is given via DHCP and my internal FTP server IP is 10.10.10.1/24. What would the command line for the STACTIC TCP look like? Thanks for the help.

burke

 

[yizhar]

HI.

Look here:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/cmd_ref/s.htm#xtocid20

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar