«

Hello,

I would like to do PAT port forward traffic from the outside to a
inside on
ports: 10000-50000 (tcp/udp)...

I do this for single port like:

access-list outside_access_in permit tcp any host 208.208.208.208 eq
80

static (inside,outside) tcp 208.208.208.208 80 192.168.1.5 80 netmask
255.255.255.255 0 0

But couldn't find anything how to use range in static..

Best regards,

Andras Kende
http://www.kende.com

In article < >,
Andras Kende <> wrote:
:I would like to do PAT port forward traffic from the outside to a
:inside on
orts: 10000-50000 (tcp/udp)...

:static (inside,outside) tcp 208.208.208.208 80 192.168.1.5 80 netmask 255.255.255.255 0 0

:But couldn't find anything how to use range in static..

There is no way to use a port range in statics.

If you do not need the rest of the ports, then use a plain static and
adjust your outside ACL to deny the unwanted traffic.

If you *really* need to have a large range of ports go to one place,
and a different big range of ports go to a different place, then
you might be able to do it with PIX 6.3(3) using policy nat.
--
When your posts are all alone / and a user's on the phone/
there's one place to check -- / Upstream!
When you're in a hurry / and propagation is a worry/
there's a place you can post -- / Upstream!