Static map

[ericmichael]

I am trying to setup a static mapping for a web server from multiple different outside ip addresses. I was wondering if I have the right syntax for it:

static (inside, outside) tcp 192.168.1.24 443 192.168.4.4 9218 netmask 255.255.255.255

static (inside, outside) tcp 192.168.1.25 443 192.168.4.4 9219
netmask 255.255.255.255

access-list 101 permit tcp host 192.168.4.4 any eq 443

Any help would be appreciated.

 

[rudeboy]

Acess lists work with souce first and destination last so your access list should say

access-list 101 permit tcp any host 192.168.1.24 eq 443
access-group 101 in interface outside this applies it to outside interface

I have never done pat with diff source and dest ports, but this should work for you.

 

[ericmichael]

Thanks for the quick response. I will try the changes after hours and tell you how it worked out. thanks again.

 

[yogeshji]

Hi

Just adding to the notes, I think it will not work. Just make sure, you are using the right ports but on the same IP address i am not pretty sure.

 

[ASofyan]

Hallo rudboy ,

can you help mem,

when i using

pix: STATIC (INSIDE,DMZ) 192.168.8.0 192.168.8.0 netmask 255.255.255.0 0 0

All services can't run (like timeout) so i must be type "ping" to interface inside for using all services.

Help me Sir

Regards
Asofyan