pix firewall and port forwarding

Posted on 2005-05-17
Last Modified: 2013-11-16

I have just replace a DLink firewall on my DSL connection with a Cisco 501 PIX firewall. On the DLink we have port forwarding setup to forware "IP" protocol for port #1050 to an internal machine on our LAN (with IP address I need to know what would be the proper way to do the same forwarding on a Cisco PIX. I see examples of things like:
static(inside,outside) tcp interface http http netmask

and correspondingly

access-list outside_in permit tcp any interface outside eq http

but the port forwarding in my dlink said protocol is IP (0) 1050/1050.  So how does that compare to either tcp or udp?

thanks terry

Thank you for your help.

Question by:techbnjcomp
    1 Comment
    LVL 79

    Accepted Solution

    Let's assume that you need both tcp and udp 1050

    static (inside,outside) tcp interface 1050 1050 netmask
    static (inside,outside) udp interface 1050 1050 netmask
    access-list outside_in permit tcp any interface outside eq 1050
    access-list outside_in permit udp any interace outside eq 1050
    access-group outside_in in interface outside

    One you have that setup, you can use "show access-list" to see the (hitcount= ) on either the tcp or udp line.
    If either one gets zero hits, but many on the other one, then we know for sure which you need and which one you can later delete from the config..

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Join & Write a Comment

    Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
    I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    This video discusses moving either the default database or any database to a new volume.

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now