Renegade Public Forums
C&C: Renegade --> Dying since 2003™, resurrected in 2024!
Home » General Discussions » General Discussion » OT: Question for Crimson and Blazer
OT: Question for Crimson and Blazer [message #109570] Mon, 23 August 2004 02:52 Go to next message
Phoenix - Aeon is currently offline  Phoenix - Aeon
Messages: 221
Registered: April 2004
Karma: 0
Recruit
Hopefully you work in the right department at Cisco to be able to answer this, if not thanks anyway.

At the moment I'm having to port forward to multiple I.P addresses using a PIX. What Ineed to be able to do is to tell the PIX that any traffic going into 1 external address needs to be forwarded to 2 internal I.P addresses. The firewall is a PIX 515 running PDM 3 and BIOS 6.3. Is this possible?
OT: Question for Crimson and Blazer [message #109634] Mon, 23 August 2004 09:32 Go to previous messageGo to next message
warranto is currently offline  warranto
Messages: 2584
Registered: February 2003
Location: Alberta, Canada
Karma: 0
General (2 Stars)
Should they charge you something for this "customer service"? Razz
OT: Question for Crimson and Blazer [message #109641] Mon, 23 August 2004 10:13 Go to previous messageGo to next message
Phoenix - Aeon is currently offline  Phoenix - Aeon
Messages: 221
Registered: April 2004
Karma: 0
Recruit
Probably Wink Hell, Microsoft charge us and we're a Microsoft Gold Pertner, go figure.
OT: Question for Crimson and Blazer [message #109647] Mon, 23 August 2004 10:37 Go to previous messageGo to next message
Crimson is currently offline  Crimson
Messages: 7429
Registered: February 2003
Location: Phoenix, AZ
Karma: 0
General (5 Stars)
ADMINISTRATOR
We work for the Networking Academy, so I doubt it... but Blazer might know something.

I'm the bawss.
OT: Question for Crimson and Blazer [message #109674] Mon, 23 August 2004 12:17 Go to previous messageGo to next message
Phoenix - Aeon is currently offline  Phoenix - Aeon
Messages: 221
Registered: April 2004
Karma: 0
Recruit
You'd be working with the Catalysts and the like then? Not that they're any easier to configure Wink
OT: Question for Crimson and Blazer [message #109680] Mon, 23 August 2004 13:10 Go to previous messageGo to next message
Blazer is currently offline  Blazer
Messages: 3322
Registered: February 2003
Location: Phoenix, AZ
Karma: 0
General (3 Stars)
Administrator/General

I'm a UNIX admin at Cisco, I don't do router stuff...I was taking free CCNA classes but they got halted when the instructor was reassigned Sad

I can ask one of the router guys your question if you want, but have you tried google? I did a bit of googling and found lots of examples for what you are trying to do.
OT: Question for Crimson and Blazer [message #109772] Tue, 24 August 2004 04:29 Go to previous messageGo to next message
Phoenix - Aeon is currently offline  Phoenix - Aeon
Messages: 221
Registered: April 2004
Karma: 0
Recruit
If you could check with them that would be great, thanks. I did check google but most of the answers I found amounted to "Don't be stupid" and "Cisco is shit" :rolleyes:
OT: Question for Crimson and Blazer [message #109781] Tue, 24 August 2004 06:25 Go to previous messageGo to next message
Phoenix - Aeon is currently offline  Phoenix - Aeon
Messages: 221
Registered: April 2004
Karma: 0
Recruit
Also, does Cisco hardware support UPnP?
OT: Question for Crimson and Blazer [message #109852] Tue, 24 August 2004 13:51 Go to previous messageGo to next message
Blazer is currently offline  Blazer
Messages: 3322
Registered: February 2003
Location: Phoenix, AZ
Karma: 0
General (3 Stars)
Administrator/General

Here is a condensed AIM conversation I had with one of our networking guys...I changed his screename to protect his privacy.


[14:43:54 24-08-2004] Blazer0x: hiya
[14:44:05 24-08-2004] Blazer0x: I have a technical question for you Smile
[14:44:20 24-08-2004] ciscodude: shoot
[14:44:40 24-08-2004] Blazer0x: A friend of mine posted a question...wondering if you could answer off the top of your head...
[14:44:48 24-08-2004] Blazer0x: his question: "At the moment I'm having to port forward to multiple I.P addresses using a PIX. What Ineed to be able to do is to tell the PIX that any traffic going into 1 external address needs to be forwarded to 2 internal I.P addresses. The firewall is a PIX 515 running PDM 3 and BIOS 6.3. Is this possible? "
[14:45:10 24-08-2004] Blazer0x: If you dont know off the top of your head dont worry about it, I just told him I would ask someone if I got a chance
[14:45:22 24-08-2004] Blazer0x: he thinks because I work at Cisco I should know Wink
[14:45:58 24-08-2004] ciscodude: haha
[14:46:19 24-08-2004] ciscodude: I do not know if it is possible but I can look to see if it is
[14:46:43 24-08-2004] ciscodude: Are there different ports involved?
[14:46:47 24-08-2004] Blazer0x: I dont even know wtf he is trying to do
[14:46:58 24-08-2004] Blazer0x: I dunno, I'd say assume the simplest scenario
[14:47:12 24-08-2004] ciscodude: Like traffic comming in on two different ports get directed to two different internal boxes?
[14:47:21 24-08-2004] ciscodude: That would be possible
[14:47:47 24-08-2004] ciscodude: Lets say that his external IP is 1.1.1.1 and he has an Internal of 2.2.2.1 and 2.2.2.2
[14:47:56 24-08-2004] Blazer0x: ok
[14:48:13 24-08-2004] ciscodude: If he has 1.1.1.1 Port 80 inbound he could point to 2.2.2.1
[14:48:22 24-08-2004] ciscodude: and 1.1.1.1 Port 22 he could point to 2.2.2.2
[14:48:28 24-08-2004] ciscodude: That would be no problem
[14:48:52 24-08-2004] ciscodude: However if he is just saying Anything coming in on 1.1.1.1 goes to both 2.2.2.1 and 2.2.2.2 that would probably not work
[14:49:23 24-08-2004] ciscodude: He could choose any port #'s he wants to point to any other port #'s on the inside
[14:49:37 24-08-2004] Blazer0x: It kind of sounds like to me he wants to have failover or load balancing... "traffic going into 1 external address needs to be forwarded to 2 internal I.P addresses"
[14:49:46 24-08-2004] Blazer0x: like maybe 2 web servers or something
[14:49:47 24-08-2004] ciscodude: Like 80 on the outside could map to 8080 on the inside - or whatever he wants
[14:50:03 24-08-2004] Blazer0x: yeah
[14:50:24 24-08-2004] Blazer0x: I will condense that down into a short answer for him
[14:50:41 24-08-2004] Blazer0x: and ask exactly what he is trying to do
[14:50:47 24-08-2004] Blazer0x: thanks for the info Smile
[14:50:48 24-08-2004] ciscodude: It might still be possible with some smoke a mirrors but it surely would not be a "standard" setup Smile
[14:51:01 24-08-2004] ciscodude: If I know what his goal was it would be easier to answer the question
[14:51:10 24-08-2004] Blazer0x: yeah


So long story short is if you are trying to do some sort of fail over or load balance (connections to external IP on the same port get directed to two internal IPs), that's not going to work, with a PIX anyway...you would need a CSS or LocalDirector. Let me know exactly what you are trying to do and I can probably get you the answer as to the best way to do it, if its possible.
OT: Question for Crimson and Blazer [message #110296] Thu, 26 August 2004 03:58 Go to previous message
Phoenix - Aeon is currently offline  Phoenix - Aeon
Messages: 221
Registered: April 2004
Karma: 0
Recruit
We're installing a new VoIP phone exchange and we want to have it sat behind the PIX, the exchange has 2 different components with different internal address, x and y, however, they have to share the same external I.P address, z. Packets coming in on ports a and b will need to go internal address x and packets coming in on ports c and d will need to go to internal address y. Also, some of the packets are based on UPnP rather than TCP/IP, as far as I'm aware, PIX is non compatible with UPnP, is this wrong? This question is also relevant to the SIP rules used for Live Communication Server.
Previous Topic: OT: «Broadband Announcement For UK»
Next Topic: best site for models, skins, ect.
Goto Forum:
  


Current Time: Tue Nov 12 14:42:40 MST 2024

Total time taken to generate the page: 0.00768 seconds