Link to home
Start Free TrialLog in
Avatar of geomic
geomic

asked on

How to use "conduit permit ip host" to allow acces to any port ?

Hi,
I have a user who need to access one particular IP on my network. I have assigned public IP to that computer but I don't know how to add a line to my PIX515 to allow access to that particular user IP (public IP) to access any port on my internal computer.
I have tried:
           conduit permit ip host 214.18.161.151 203.225.211.118 255.255.255.24
and
           conduit permit ip host 214.18.161.151 203.225.211.118 255.255.255.240
and
         conduit permit ip host 214.18.161.151 203.225.211.118 255.255.255.0

but firewall won't accept it.
It's erroring like this:
ERROR: Source address,mask <203.225.211.118,255.255.255.0> doesn't pair
Please help

Thanks


ASKER CERTIFIED SOLUTION
Avatar of Pete Long
Pete Long
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Pete's correct. You have to use a host mask
Avatar of geomic
geomic

ASKER

It did work, thanks a lot.
FYI, after I added that line to configuration it was coverted to different line:

conduit permit ip host 214.18.161.151 host 203.225.211.118


geomic
ThanQ

Pete