Renegade Public Forums
C&C: Renegade --> Dying since 2003™, resurrected in 2024!
Home » General Discussions » General Discussion » OT: Question for Crimson and Blazer
OT: Question for Crimson and Blazer [message #109852] Tue, 24 August 2004 13:51 Go to previous messageGo to previous message
Blazer is currently offline  Blazer
Messages: 3322
Registered: February 2003
Location: Phoenix, AZ
Karma:
General (3 Stars)
Administrator/General
Here is a condensed AIM conversation I had with one of our networking guys...I changed his screename to protect his privacy.


[14:43:54 24-08-2004] Blazer0x: hiya
[14:44:05 24-08-2004] Blazer0x: I have a technical question for you Smile
[14:44:20 24-08-2004] ciscodude: shoot
[14:44:40 24-08-2004] Blazer0x: A friend of mine posted a question...wondering if you could answer off the top of your head...
[14:44:48 24-08-2004] Blazer0x: his question: "At the moment I'm having to port forward to multiple I.P addresses using a PIX. What Ineed to be able to do is to tell the PIX that any traffic going into 1 external address needs to be forwarded to 2 internal I.P addresses. The firewall is a PIX 515 running PDM 3 and BIOS 6.3. Is this possible? "
[14:45:10 24-08-2004] Blazer0x: If you dont know off the top of your head dont worry about it, I just told him I would ask someone if I got a chance
[14:45:22 24-08-2004] Blazer0x: he thinks because I work at Cisco I should know Wink
[14:45:58 24-08-2004] ciscodude: haha
[14:46:19 24-08-2004] ciscodude: I do not know if it is possible but I can look to see if it is
[14:46:43 24-08-2004] ciscodude: Are there different ports involved?
[14:46:47 24-08-2004] Blazer0x: I dont even know wtf he is trying to do
[14:46:58 24-08-2004] Blazer0x: I dunno, I'd say assume the simplest scenario
[14:47:12 24-08-2004] ciscodude: Like traffic comming in on two different ports get directed to two different internal boxes?
[14:47:21 24-08-2004] ciscodude: That would be possible
[14:47:47 24-08-2004] ciscodude: Lets say that his external IP is 1.1.1.1 and he has an Internal of 2.2.2.1 and 2.2.2.2
[14:47:56 24-08-2004] Blazer0x: ok
[14:48:13 24-08-2004] ciscodude: If he has 1.1.1.1 Port 80 inbound he could point to 2.2.2.1
[14:48:22 24-08-2004] ciscodude: and 1.1.1.1 Port 22 he could point to 2.2.2.2
[14:48:28 24-08-2004] ciscodude: That would be no problem
[14:48:52 24-08-2004] ciscodude: However if he is just saying Anything coming in on 1.1.1.1 goes to both 2.2.2.1 and 2.2.2.2 that would probably not work
[14:49:23 24-08-2004] ciscodude: He could choose any port #'s he wants to point to any other port #'s on the inside
[14:49:37 24-08-2004] Blazer0x: It kind of sounds like to me he wants to have failover or load balancing... "traffic going into 1 external address needs to be forwarded to 2 internal I.P addresses"
[14:49:46 24-08-2004] Blazer0x: like maybe 2 web servers or something
[14:49:47 24-08-2004] ciscodude: Like 80 on the outside could map to 8080 on the inside - or whatever he wants
[14:50:03 24-08-2004] Blazer0x: yeah
[14:50:24 24-08-2004] Blazer0x: I will condense that down into a short answer for him
[14:50:41 24-08-2004] Blazer0x: and ask exactly what he is trying to do
[14:50:47 24-08-2004] Blazer0x: thanks for the info Smile
[14:50:48 24-08-2004] ciscodude: It might still be possible with some smoke a mirrors but it surely would not be a "standard" setup Smile
[14:51:01 24-08-2004] ciscodude: If I know what his goal was it would be easier to answer the question
[14:51:10 24-08-2004] Blazer0x: yeah


So long story short is if you are trying to do some sort of fail over or load balance (connections to external IP on the same port get directed to two internal IPs), that's not going to work, with a PIX anyway...you would need a CSS or LocalDirector. Let me know exactly what you are trying to do and I can probably get you the answer as to the best way to do it, if its possible.

Report message to a moderator

[Message index]
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: OT: «Broadband Announcement For UK»
Next Topic: best site for models, skins, ect.
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ] [ PDF ]

Current Time: Thu Sep 05 16:51:17 MST 2024

Total time taken to generate the page: 0.00714 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 420.69.
Copyright ©2001-2023 FUDforum Bulletin Board Software