思科防火墙设置.docVIP

增加一台服务器具体要求。 新增一台服务器地址：5/28。 需要nat转换成公网地址23 映射出去，并对外开通这台服务器的80端口。 在对外pix525上面增加如下： access-list acl_out permit tcp any host 23 eq www //开放外网对新服务器 80端口 static (inside,outside) 23 5 netmask 55 0 0 ////外高桥新服务器地址转换23 可是为什么转换后，不能访问23的网页，但确可以ping通23，但是访问5的主页是正常的 ？？ 具体配置如下： pix-525 enable Password: ***** pix-525# sh run : Saved : PIX Version 6.3(5) interface ethernet0 100full interface ethernet1 100full nameif ethernet0 outside security0 nameif ethernet1 inside security100 enable password FVHQD7n.FuCW78fS level 7 encrypted enable password 2KFQnbNIdI.2KYOU encrypted passwd 2KFQnbNIdI.2KYOU encrypted hostname wgqpix-525 fixup protocol dns maximum-length 512 fixup protocol ftp 21 fixup protocol h323 h225 1720 fixup protocol h323 ras 1718-1719 fixup protocol http 80 fixup protocol rsh 514 fixup protocol rtsp 554 fixup protocol sip 5060 fixup protocol sip udp 5060 fixup protocol skinny 2000 fixup protocol smtp 25 fixup protocol sqlnet 1521 fixup protocol tftp 69 names access-list acl_out permit tcp any host 21 eq www access-list acl_out permit icmp any any access-list acl_out permit tcp any host 20 eq https access-list acl_out permit tcp any host 23 eq www access-list outbound permit icmp any any access-list outbound permit ip any any pager lines 24 mtu outside 1500 mtu inside 1500 ip address outside 22 28 ip address inside 54 52 ip audit info action alarm ip audit attack action alarm no failover failover timeout 0:00:00 failover poll 15 no failover ip address outside no failover ip address inside no pdm history enable arp timeout 14400 static (inside,outside) 21 1 netmask 55 0 0 static (inside,outside) 20 3 netmask 55 0 0 static (inside,outside) 23 5 netmask 55 0 0 access-group acl_out in interface outside access-group outbound in interface inside route outside 29 1 route inside 53 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00 timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00 timeout si