| 9.5 |  | Port Address Translation (PAT) |
| 9.5.6 |  | Port redirection |

| Overview of port redirection With software versions 6.0 and higher, the PIX Security Appliance provides static PAT capability. This feature, referred to as Port Redirection, allows outside users to connect to a particular IP address or port and have the PIX Security Appliance redirect traffic to the appropriate inside server. This capability can be used to send multiple inbound TCP or UDP services to different internal hosts through a single global address. The shared global address can be a unique address, a shared outbound PAT address, or it can be shared with the external interface.

Port redirection example
The example shown in Figure illustrates the external user directing a Telnet request to the PIX outside IP address 192.168.0.2. The PIX Security Appliance redirects the request to host 10.0.0.4. The external user then directs an HTTP port 8080 request to PAT address 192.168.0.9. The PIX Security Appliance redirects this request to host 172.16.0.2 port 80.

Figure is a partial configuration for the PIX Security Appliance in the example. Note that an access list has been used in place of a conduit to enable inbound connections.

Utilize the Online Command Reference to review the static command, and look at how it can be used in conjunction with PAT. Additional syntax explanations are also provided.

| Lab Activity Lab Exercise: Configure PAT In this lab exercise, students will configure Port Address Translation (PAT) on the inside interface.