This can be done also. With PixOS version 6.0.x or higher this can be done static (inside,outside) tcp 1.1.1.1 80 192.168.1.1 80 netmask 255.255.255.255 0 0 access-list 100 permit tcp any host 1.1.1.1 eq 80 access-group 100 permit in interface outside Having said that, I prefer CheckPoint because it is GUI and and you can do load balance a bunch of web servers with just one external IP. CheckPoint supports DNS round robin, random, etc.... When in doubt, go with CP running on Nokia. It's a little pricey but it beats Pix in term of managability. By the way, Pix's PDM sucks big time. My .002c "[EMAIL PROTECTED] (John Nemeth)" wrote:This is something that is easily done with most host based implementations of NAT. The objective is to use a single outside address. I want to NAT a network. However, there is a webserver on the inside which people on the outside need to be able to reach. I want to be able to redirect traffic sent to TCP port 80 on the outside address to the web server. I realise I can do this with a static mapping, but this would require an outside address dedicated to the web server and I want to do this without using more then one outside address. I've gone through the IOS docs on sections dealing with NAT and didn't find any way to do this. Does anybody have any suggestions? Do you Yahoo!? Yahoo! Web Hosting - Let the expert host your site
Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=57435&t=57420 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
