Solved

How to use "conduit permit ip host" to allow acces to any port ?

Posted on 2003-11-20
4
1,248 Views
Last Modified: 2008-02-01
Hi,
I have a user who need to access one particular IP on my network. I have assigned public IP to that computer but I don't know how to add a line to my PIX515 to allow access to that particular user IP (public IP) to access any port on my internal computer.
I have tried:
           conduit permit ip host 214.18.161.151 203.225.211.118 255.255.255.24
and
           conduit permit ip host 214.18.161.151 203.225.211.118 255.255.255.240
and
         conduit permit ip host 214.18.161.151 203.225.211.118 255.255.255.0

but firewall won't accept it.
It's erroring like this:
ERROR: Source address,mask <203.225.211.118,255.255.255.0> doesn't pair
Please help

Thanks


0
Comment
Question by:geomic
  • 2
4 Comments
 
LVL 57

Accepted Solution

by:
Pete Long earned 250 total points
ID: 9787438
Hi geomic,
try

conduit permit ip host 214.18.161.151 203.225.211.118 255.255.255.255


Cheers!
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 9787810
Pete's correct. You have to use a host mask
0
 

Author Comment

by:geomic
ID: 9787898
It did work, thanks a lot.
FYI, after I added that line to configuration it was coverted to different line:

conduit permit ip host 214.18.161.151 host 203.225.211.118


geomic
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 9788917
ThanQ

Pete
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

In a WLAN, anything you broadcast over the air can be intercepted.  By default a wireless network is wide open to all until security is configured. Even when security is configured information can still be intercepted! It is very important that you …
There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now