Solved

open port 3389 on pix 525 firewall

Posted on 2006-11-10
7
402 Views
Last Modified: 2013-11-21
hi
i want to use remote desktop connection to my pc which is after pix 525 firewall and router2800 iam using static nat to refer to my pc
my public IP is 62.68.65.43 refer to static 172.16.110.2
i want to open the port 3389 in pix firewall but i do not know how i can do that
what command must i use in pix firewall  to open this port


thanks
0
Comment
Question by:nasemabdullaa
  • 3
  • 3
7 Comments
 
LVL 10

Accepted Solution

by:
srgilani earned 500 total points
ID: 17912729
Follow below commands.


static (inside,outside) 172.16.110.2  62.68.65.43
access-list inbound permit tcp any host 62.68.65.43 eq 3389
access-list inbound permit udp any host 62.68.65.43 eq 3389
access-group inbound in interface outside


0
 

Author Comment

by:nasemabdullaa
ID: 17912780
hi
thanks for your reply

 the last command  access-group inbound in interface outside must i put interface outside or my outside Ip

thanks
0
 
LVL 10

Expert Comment

by:srgilani
ID: 17912868
last command means access list inboud will be apply to all incoming traffic coming from interface outside.

0
Manage your data center from practically anywhere

The KN8164V features HD resolution of 1920 x 1200, FIPS 140-2 with level 1 security standards and virtual media transmissions at twice the speed. Built for reliability, the KN series provides local console and remote over IP access, ensuring 24/7 availability to all servers.

 
LVL 32

Expert Comment

by:rsivanandan
ID: 17912876
It should've been the other way round and also I would make it specific so that in future if I want to forward some other ports to some other machines, I will use the same public IP (Conserve it)

static (inside,outside) tcp 62.68.65.43 3389 172.16.110.2 3389

access-list inbound permit tcp any host 62.68.65.43 eq 3389

access-group inbound in interface outside

This is assuming that the public ip is free and is not assigned to the Outside interface.

Cheers,
Rajesh
0
 

Author Comment

by:nasemabdullaa
ID: 17912891
hi
thanks for your reply
my public ip is refer to only 172.16.110.2
and the other pblic ip (62.68.65.2 to 62.68.65.42) is use to nat in my network

thanks
0
 
LVL 10

Expert Comment

by:srgilani
ID: 17912933
then use what i advice :)

0
 

Author Comment

by:nasemabdullaa
ID: 17912959
hi
thanks for all
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question