Solved

Add an Access-List item to a Cisco Pic Firewall

Posted on 2006-06-29
3
394 Views
Last Modified: 2013-11-29
I'm trying to add an access-list item to my cicso pix firewall so I can accept ftp traffic to a server.
Here's what I'm doing
ssh <pix ip>
enter username
enter password
enable
enter password
conf t
access-list outside_acl permit tcp any host 70.69.184.115 255.255.255.255 0 0 ftp

I then get error "ERROR: extra command argument(s)"

I've also tried access-list outside_acl permit tcp any host 70.69.184.115 255.255.255.255 ftp

but get the same error.

Can anyone tell me what I'm doing wrong or what it is I need to do?
0
Comment
Question by:RPIIT
3 Comments
 
LVL 19

Accepted Solution

by:
nodisco earned 500 total points
ID: 17014436
hi there

You need to work it as :

access-list outside_acl permit tcp any host 70.69.184.115 eq ftp

You may also need to add the ftp-data port

access-list outside_acl permit tcp any host 70.69.184.115 eq ftp-data

And you will need to apply this to the outside interface (assuming its allowing ftp access to this host from outside) if its not already:

access-group outside_acl in interface outside

hth

0
 

Author Comment

by:RPIIT
ID: 17014737
Perfect, worked great.
Thank you.

What does the "eq" mean?
0
 
LVL 27

Expert Comment

by:Nopius
ID: 17015247
'eq' means 'equal', look here http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727a3.html#wp1067755
and read about 'operator' in the table below.
..
The operator compares the source IP address (sip) or destination IP address (dip) ports. Possible operands include lt for less than, gt for greater than, eq for equal, neq for not equal, and range for an inclusive range.
...
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
Meet the world's only “Transparent Cloud™” from Superb Internet Corporation. Now, you can experience firsthand a cloud platform that consistently outperforms Amazon Web Services (AWS), IBM’s Softlayer, and Microsoft’s Azure when it comes to CPU and …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question