Cisco PIX port redirection

[jlazzaro]

I thought the PIX supported this configuration...tried on 6.3(5), 7.2(3), and 8.0(3) with no luck.

Customer has an app running off port 5090. Occasionally, they need to connect to it over port 80 instead. Simple enough I thought...

static (DMZ,outside) tcp x.x.x.x 5090 y.y.y.y 5090 netmask 255.255.255.255
static (DMZ,outside) tcp x.x.x.x 80 y.y.y.y 5090 netmask 255.255.255.255
ERROR: duplicate of existing static

Any way around this?

edit: i may just redirect at the border router, but am open for other work arounds ;x

 

[her209]

Originally posted by: jlazzaro
Any way around this?

No. Think about it. When return data packets are sent back, the PIX won't know whether to change the source port to 80 or 5090.