Cisco Pix 515 port forwarding

Hi.

I have a Cisco Pix 515, but when i use the web interface, i can not make a port forward. I there anyone who knows how to configure a PIx 515 with the web interface og the telnet console.
noerdarAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

IceLockoCommented:
Are you using the PDM interface?  If so, go to the TRANSLATIONS RULES lable, and ADD a new Rule.

There, you can select the source and the destination.

If this don´t help you, please give me the version of PIX and PDM, and try to draw better what exactly do you want to do.

Greetings.
rsivanandanCommented:
It should be pretty simple to do a port forward using telnet;

Say your internal web server is 10.10.10.10 and you want to port forward the PIX outside interface address, all you do is this;

static (inside,outside) tcp interface www 10.10.10.10 www netmask 255.255.255.255

access-list Outside-In permit ip any interface outside eq www
access-group Outside-In in interface outside


That should be it.

Cheers,
Rajesh
calvinetterCommented:
Agree w/ Rajesh's example, if you only have the single public IP available, but be sure to run 'clear xlate'  _before_ adding/modifying any NAT/static NAT entries.

noerdar - You can also run CLI commands from within PDM: go to: Tools -> Command Line Interface... -> & either paste in a single-line command in the "command:" input box, or: click "Multiple Line Command" button, paste in multiple lines of commands, hit "Send" button.

cheers
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

noerdarAuthor Commented:
Su but where does the specefic port in the line "static (inside,outside) tcp interface www 10.10.10.10 www netmask 255.255.255.255" come in.


My internal server har the ip 192.168.1.2 and outside is 80.124.240.60 for example nad i want to map port lets say port 5000 to the internal ip. The port number is not represented in "static (inside,outside) tcp interface www 10.10.10.10 www netmask 255.255.255.255".

The pix is actually a PIX 506 and not 515 sorry about that. And im using the PDM for the most, but i can use telnet if that is better.

Please follow up on my response
carl_legereCommented:
re: The port number is not represented in "static (inside,outside) tcp interface www 10.10.10.10 www netmask 255.255.255.255"."

it is represnted by www, as www=80

although the PDM or it's predecessor ASDM are helpful, it is usually best to ask EE questions reguarding CLI commands becasue EE is a text only forum.
noerdarAuthor Commented:
ok, but then i still dont get it. How do i make the port forward on a request from the outside to an internal IP
noerdarAuthor Commented:
ok but how does I represent port 5800 f.eks.
carl_legereCommented:
www is an alias to port 80

when making the config, you may use either www or http or 80 in the same spot in the comands, Cisco turns around and renames them www, or http depending on the IOS series and version.  

static (inside,outside) tcp interface www 10.10.10.10 www netmask 255.255.255.255
                                          |          |           |             |
                             use interface   port#    inside IP   port#
                    instead of IP so that
                    chaning IPs is easier
calvinetterCommented:
>ok but how does I represent port 5800 f.eks
   What protocol, TCP or UDP?  Or both?
Examples:
-----------
NOTE: always run "clear xlate" before adding/removing static NAT entries.

A) TCP only, using outside interface's IP:
  static (inside,outside) tcp interface 5800 10.10.10.10 5800

B) UDP only, using outside interface's IP:
  static (inside,outside) udp interface 5800 10.10.10.10 5800

C) Both TCP & UDP, using outside interface's IP:
  static (inside,outside) tcp interface 5800 10.10.10.10 5800
  static (inside,outside) udp interface 5800 10.10.10.10 5800

D) TCP only, using some other public IP:
  static (inside,outside) tcp 88.77.66.11 5800 10.10.10.10 5800

Like carl_legere mentioned, the PIX will display some commonly used ports by their service name when displaying the config, such as "www" for TCP port 80, & "smtp" instead of TCP port 25.

cheers
noerdarAuthor Commented:
ok thx. I will try it and get back to you all on 04-07-2006 or in european 7/4-2006. Thanks for the help so far.
noerdarAuthor Commented:
I any of you have som links to some good tutorial guides og help on configuring Cisco Pix models with telnet or PDM, then please write them here. All help is appreciated.
calvinetterCommented:
What version of PIX?
   For PIX 6.x series software (4th link down is most helpful):
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/index.htm
   For PIX 7.x series (CLI Configuration Guide is what you'll want most):
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_70/index.htm

cheers

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
noerdarAuthor Commented:
thx
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.