Имеется PIX515E с тремя Fe.
        |
        |
        |
----(outside)------
|   80.80.80.1/26   |
|                     |
| 10.10.10.1/24 (dmz)----10.10.10.2
|                      |
|192.168.100.1/24   |
------(inside)-----
         |
         |
         |
За dmz интерфейсом стоит машина 10.10.10.2,
на ней www сервер. Настроил static, с наружи машина 10.10.10.2 доступна по адресу 80.80.80.2, а вот с inside интерфейса (из сети 192.168.100.0/24) нет:(
Как настроить доступ к 10.10.10.2 из внутренней сети по адресу 80.80.80.2?
========================
ip add out 80.80.80.1/26
ip add ins 192.168.100.1/24
ip add dmz 10.10.10.1/24

access-list ping permit ip any any

access-group ping in interface outside
access-group ping in interface inside
access-group ping in interface dmz

515(config)# sh nat
nat (inside) 1 192.168.100.0 255.255.255.0 0 0

515(config)# sh glo
global (outside) 1 interface

515(config)# sh stat
static (dmz,outside) 80.80.80.2 10.10.10.2 netmask 255.255.255.255 0 0
=====================
515(config)# deb icm tr

>root# ping 80.80.80.2

55: ICMP echo-request from inside:192.168.100.21 to 80.80.80.2 ID=362
seq=9696 length=40
56: ICMP echo-request: translating inside:192.168.100.21/512 to
outside:80.80.80.1/11
57: ICMP echo-request from inside:192.168.100.21 to 80.80.80.2 ID=512
seq=10496 length=40
58: ICMP echo-request: translating inside:192.168.100.21/512 to
outside:80.80.80.1/11

• PIX with PAT, ВОЛКА, 12:10 , 11-Июн-04, (1)