Re: PIX Version 6.3(4) "interface" vs IP adress


<mak@xxxxxxxxxx> wrote in message news:dr23mt$tu7$1@xxxxxxxxxxxxxxxxxxxxxxx

> what's the difference of binding the port/protocoll to "interface"
>
> static (inside, outside) udp interface 80 192.168.1.10 5060 netmask
255.255.255.255
> access-list traffic_in permit udp any interface outside eq 5060

This PAT, and hence you can only have ONE IP and ONE PORT.
i.e. if you want two port tcp/80 running, you can not


> static (inside,outside) udp 12.34.56.73 5060 192.168.1.10 5060 netmask
255.255.255.255 0 0
> access-list traffic_in permit udp any host 12.34.56.73 eq 5060

This is NAT, and hence you can map MANY IP to MANY inside, with SAME
portnumbers.
i.e. you can run several port TCP/80, just with differrent IPs


>
> what would you recommend how to do this.

Use NAT if you have IPs, otherwise, why do you have IPs ?
Use PAT if you have only ONE (1) assigned to you by your ISP, fx via DHCP on
outside.


>
> any help appreciated,
> mak


.

Relevant Pages

  • RE: ICMP (Ping)
    ... Why do you assume that out of millions of Ips that respond, ... > almost) running a port scan those that reply. ... replies from a ping request. ... IP ranges with no target in mind, ...
    (Security-Basics)
  • RE: IPS and Trunking
    ... Cisco does offer an "IPS on a stick" feature and is what the OP is ... You create another vlan on the switch. ... You convert one of the ports to a trunk port and plug the IPS ...
    (Focus-IDS)
  • Re: Port Scanning
    ... Most IPS admins do not block port scans. ... > essentially adding rules that the attacker has ... > customer works primarily with a particular remote ...
    (Pen-Test)
  • Re: Port watching tool
    ... Active Ports only shows one connection to port 25 (which I am trying to ... I am finding certain IPs to be ... generating large numbers of SMTP connections to the server, ... Symantec is the Diamond sponsor. ...
    (Security-Basics)
  • Re: Source Port 0 Host Sweep
    ... I had seen applications request port 0 when they really wanted the ... I have about 4 or 5 different internal IPs that are behaving this way. ... > I'm not sure if this applies in your case, however I've seen ACK ...
    (Security-Basics)