PIX Firewall configures port mapping.

When using PIX firewall or ASA firewall to configure port mapping, you need to configure 2 steps, 1 is to configure port mapping, 2 is to configure access control list.

Command enumeration:

Static (inside,outside) tcp interface 3389 10.0.0.13 3389 netmask 255.255.255.255

/ / the meaning of this command is that when the external network address accesses the TCP 3389 port of the external network interface of the firewall, map this access to port 3389 of the internal network 10.0.0.13 address. The external network address can use either a fixed IP or interface. In the ADSL environment, we usually cannot determine the IP address of the external network interface, so we can use interface instead.

Access-list outside_in extended permit ip any any

Access-group outside_in in interface outside

/ / after configuring the port mapping, you must also configure an ACL to allow traffic release, and apply this ACL to the public network interface outside