Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 271
  • Last Modified:

PIX 501 service group forwarded to internal host

Hi all experts,
Is there a way to forward a service group to an internal host on the pix 501?  Basically what I need to do is open about 2000 ports to a specific host and am trying to find out if i can avoid creating 2000 translation rules...

Let me know if that is doable and how.

Thanks much!
0
maredzki
Asked:
maredzki
  • 2
  • 2
1 Solution
 
ruddgCommented:
Create a single translation rule that maps one public IP to the internal host.  Create an access list that allows the port range using  the aforementioned service group.  You cannot use service groups to define NAT -- only access lists.  If you do not have an available public IP, buy a block from your provider.
0
 
maredzkiAuthor Commented:
So are you telling me that using a single public IP I cannot do multiple service groups and/or single ports forwards to different internal hosts?  I am able to forward multiple single ports to different hosts, but cannot figure out how to do groups.

Is that my final answer from ruddg?  
0
 
ruddgCommented:
Yes, as you have noted, you can create ~65K port forwards to as many hosts as you like using a single public IP, but you cannot do "group" port forwards.  The service group feature applies only to the access lists, not to NAT/PAT.  You can still use the service group to create the access list, but you would need multiple translation statements to forward a block of ports to a specific internal host.  Final answer. :-(

0
 
maredzkiAuthor Commented:
Thanks for your help ruddg, inspite of the answer I was looking for :-)
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now