I'm seeking some help from a PIX expert.
I have the following configuration
 
               
                ^ To Internet, head router (2)
                I
                I 215.x.x.1 (external PIX address)
      -------------------
     |     PIX 515    |
     |     V 6.1       |
      -------------------
               I  192.168.21.1 (internal IP Address)
               I
               I  192.168.21.2
     ---------------------- 41                         42      Serial Link to 206.x.x.0 /24
     I  Cisco 2621  |------------------------------------     (Real address)  
     ----------------------    205.x.x.240/30
                |
                I 10.10.10.0 /24
 
The remote office running real address (206.x.x.0 /24) needs to run no-nat to outside, and mail and ftp  servers in it will need public access to outside to inside.I tried the following open config (only to test the no-NAT issues)
 
ip address outside 215.x.x.3  255.255.255.0
ip address inside 192.168.21.1 255.255.255.248
access-list outside permit ip any any
access-list inside permit ip any any
access-list no-nat-inside permit ip 206.x.x.0 255.255.255.0 206.x.x.0 255.255.255.0
access-list no-nat-inside permit ip any any
global (outside) 1 interface
nat (inside) 0 access-list no-nat-inside
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 206.x.x.2 206.x.x.2 netmask 255.255.255.255 0 0 (mail server)
access-group outside in interface outside
access-group inside in interface inside
route outside 0.0.0.0 0.0.0.0 215.x.x.2 1 (to outside)
route inside 10.10.10.0 255.255.255.0 192.168.21.2 1
route inside 206.x.x.0 255.255.255.0 192.168.21.2 2
I'm testing making telnet to the internal mail server from outside  but always the result is:
Dec 31 12:30:45 [192.168.21.1.2.2] %PIX-3-106011: Deny inbound (No xlate) tcp sr
c inside:215.x.x.5/33152 dst inside:206.x.x.2/25
 
Any idea??? Help is welcome
 
Ileana
[EMAIL PROTECTED]

Reply via email to