need IOS help with an ACL/static address that will allow all traffic on HTTP and HTTPS to go to one ip address

xyyz

Diamond Member
Sep 3, 2000
4,331
0
0
alright, this is what i need.

i am having people from the outside connect to a webserver. i've opened ports 80 and 443 on the outside device which is a firewall.

traffic with pass through a cisco 806 before it gets to the firewall. i have reflexive ACL's, so I want to open these ports on the 806 as well.

here's the info

inside interface of the firewall - 10.20.110.7
outside interface of the router - 10.20.110.8
inside address of the router 192.168.1.254
address of the webserver - 192.168.1.253

now, please don't recommend that things be done another way. i know there are better ways of doing this. however, i'm not looking for a better solution. the client wants it this way, so this is the way it must me.

i need someone to help me create an ACL entry and another entry that will forward all HTTP and HTTPS traffic that comes on the public ip address to be directed to port 80 or 443 on the router, which will then direct it to port 80 and 443 on the webserver.