|
I'm seeking some help from a PIX expert.
I have the following configuration
^ To Internet, head router (2)
I
I 215.x.x.1 (external PIX address)
-------------------
| PIX
515 |
| V 6.1
|
-------------------
I 192.168.21.1 (internal IP Address)
I
I 192.168.21.2
---------------------- 41 42 Serial
Link to 206.x.x.0 /24
I Cisco
2621 |------------------------------------
(Real address)
---------------------- 205.x.x.240/30
|
I 10.10.10.0 /24
The remote office running real address (206.x.x.0 /24) needs to run no-nat
to outside, and mail and ftp servers in it will need public access to
outside to inside.I tried the following open config (only to test the
no-NAT issues)
ip address outside 215.x.x.3 255.255.255.0
ip address inside 192.168.21.1 255.255.255.248
access-list outside permit ip any any
access-list inside permit ip any any
access-list no-nat-inside permit ip 206.x.x.0 255.255.255.0
206.x.x.0 255.255.255.0
access-list no-nat-inside permit ip any any
global (outside) 1 interface
nat (inside) 0 access-list no-nat-inside
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 206.x.x.2 206.x.x.2 netmask 255.255.255.255 0 0
(mail server)
access-group outside in interface outside access-group inside in interface inside
route outside 0.0.0.0 0.0.0.0 215.x.x.2 1 (to outside)
route inside 10.10.10.0 255.255.255.0 192.168.21.2 1
route inside 206.x.x.0 255.255.255.0 192.168.21.2 2
I'm testing making telnet to the internal mail server from
outside but always the result is:
Dec 31 12:30:45 [192.168.21.1.2.2] %PIX-3-106011: Deny inbound (No xlate)
tcp sr
c inside:215.x.x.5/33152 dst inside:206.x.x.2/25 Any idea??? Help is welcome
Ileana
[EMAIL PROTECTED] |
- RE: PIX-no nat config Ileana Hechavarria
- RE: PIX-no nat config Dirk Pfau
