Ciao a tutti,
Sono un nuovo iscritto a questo forum e sono qui adesso purtroppo solo per imparare e quindi vi ringrazio in anticipo per il tempo che mi dedicate.
Ho un PIX 501 sw 6.3.5.
Ho a disposizione un solo indirizzo IP pubblico.
Vorrei pubblicare 2 server web, uno sulla porta 80 dell'IP pubblico e uno sulla porta 8080.
Naturalmente i server interni hanno 2 IP differenti.
Ho usato questa istruzione:
static (inside,outside) tcp EXT_IP EXT_PORT INT_IP INT_PORT netmask 255.255.255.255 0 0
Il problema è che se PATto una porta sembra funzionare ma quando aggiungo l'altra porta questa non funziona.
vi allego la configurazione...
Ciao.
Riccardo.
: Saved
: Written by enable_15 at 14:13:15.409 UTC Sat Nov 18 2006
PIX Version 6.3(5)
interface ethernet0 auto
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
hostname cy
fixup protocol dns maximum-length 512
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
name 10.22.0.10 RCPU
name 10.22.0.1 cys
name <<IP ESTERNO>> ip_ext
name <<GATEWAY ESTERNO>> ip_gw
access-list acl_int_ext permit tcp any host ip_ext eq www
access-list acl_int_ext permit tcp any host ip_ext eq 8080
pager lines 24
mtu outside 1500
mtu inside 1500
ip address outside ip_ext 255.255.255.0
ip address inside 10.22.0.250 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 10.22.0.0 255.255.255.0 0 0
static (inside,outside) tcp ip_ext www RCPU www netmask 255.255.255.255 0 0
static (inside,outside) tcp ip_ext 8080 cys www netmask 255.255.255.255 0 0
access-group acl_int_ext in interface outside
route outside 0.0.0.0 0.0.0.0 ip_gw 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout sip-disconnect 0:02:00 sip-invite 0:03:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server TACACS+ max-failed-attempts 3
aaa-server TACACS+ deadtime 10
aaa-server RADIUS protocol radius
aaa-server RADIUS max-failed-attempts 3
aaa-server RADIUS deadtime 10
aaa-server LOCAL protocol local
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
telnet 10.22.0.0 255.255.255.0 inside
telnet timeout 5
ssh timeout 5
console timeout 0
terminal width 80
: end
