做端口redirect的时候,如果用命令:static (inside,outside) interface 10.1.1.1 tcp 80 或者把interface改成outside接口ip地址。会出现以下的错误提示。
WARNING: static redireting all traffics at outside interface;
WARNING: all
services terminating at outside interface are disabled.
(所偶从外端口来的流量都被重定向,终结于ouside端口的所有服务都被禁用,也就是防火墙上的所有服务被禁用,包括SSh,telnet,ssl。。等等,包括ping不通)
解决方案:这种写法并不标准,标准的写法应该是这样:
static (inside,outside) tcp interface 80 10.1.1.1
80
static
(inside,outside)
如果你有多余的其它注册地址,即公网地址的话,可以用static
(inside,outside)
参考英文:
The warning is correct, you are
redirecting everything received on the external interface (outside)
to the internal server. Therefore any services on the Firewall will
not work (i.e. SSH, Telnet, SSL, etc...)
The only way around it is if you have multiple Public IP Addresses
available to you and then leave the public address thats attached
to the external interface and use one of the other free addresses
in your public range within the static statement.
Alternataively, you will need to specify the
ports.