|
|
 FAQ
 Search
 Memberlist
 Usergroups
 Register
 Profile
 Private messages
 Log in
|
|
| Author |
Message |
rene
Guest
|
 Posted: Tue Feb 19, 2008 5:49 am Post subject: how can i do this kind of redirection with pix? |
 |
|
hi,all
i have a pix 515, three of interfaces are:outside 123.0.0.0/24,dmz
10.0.0.0/24, inside 192.168.0.0/24.
from interface dmz,i can get to 10.99.0.0/24, with an fixed source
ip :10.0.0.199.
now,i want a computer from outside to get to 10.99.0.0/24,how can i
do this?
i have tryed outside nat,but it does not work as expected.
can someone give me some advice?
thanks |
|
| Back to top |
|
 |
|
|
rene
Guest
|
| Posted: Tue Feb 19, 2008 8:47 am Post subject: Re: how can i do this kind of redirection with pix? |
|
|
On Feb 19, 1:49 pm, rene <idvi...@gmail.com> wrote:
| Quote: | hi,all
i have a pix 515, three of interfaces are:outside 123.0.0.0/24,dmz
10.0.0.0/24, inside 192.168.0.0/24.
from interface dmz,i can get to 10.99.0.0/24, with an fixed source
ip :10.0.0.199.
now,i want a computer from outside to get to 10.99.0.0/24,how can i
do this?
i have tryed outside nat,but it does not work as expected.
can someone give me some advice?
thanks
|
i have got an idea,and made it work,but it brought another problem...
with outside nat and static,like this:
access-list nat_outside_dmz permit tcp any host 123.0.0.1 eq 8000
nat(outside) 15 access-list nat_outside_dmz outside
global(dmz) 15 10.0.0.199
static (dmz,outside) tcp 123.0.0.1 8000 10.99.0.99 8000
it works like what i think:
when request to 123.0.0.1:8000 come from interface outside,it will be
changed like request from 10.0.0.199:8000,and send through interface
dmz.
this idea works,but normal statics does not work!!
can someone give me help?
thanks |
|
| Back to top |
|
|
|
|
