Solved

Port Forwarding in Cisco PIX 5520

Posted on 2007-03-19
11
393 Views
Last Modified: 2008-02-07
Hello,
I am trying to use port forwarding on a Cisco PIX 5520.  I use the Cisco ASDM Launcher to configure settings in this PIX BOX.  I am setting up an FTP Server on the same network, and would like to configure the PIX to forward a port to this server to enable FTP Access.  I am having some dificulty finding where to create these port forward settings.  Thanks for any help in this matter!
0
Comment
Question by:JFowlerjr
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 6
  • 4
11 Comments
 
LVL 16

Expert Comment

by:InteraX
ID: 18749218
Are you trying to allow an internal FTP server to serve FTP requests from outside hosts?
0
 

Author Comment

by:JFowlerjr
ID: 18749336
Yes
0
 
LVL 16

Expert Comment

by:InteraX
ID: 18749464
I'm not sure from ASDM, but from command line try the following.

static (inside,outside) tcp <outisdeIP> <insideIP> 21
access-list <outside_int_ACL> extended permit any host <outsideIP> eq 21


You also need to enable the FTP application inspection to allow the data channel to be opened dynamically.

Chris
0
MIM Survival Guide for Service Desk Managers

Major incidents can send mastered service desk processes into disorder. Systems and tools produce the data needed to resolve these incidents, but your challenge is getting that information to the right people fast. Check out the Survival Guide and begin bringing order to chaos.

 

Author Comment

by:JFowlerjr
ID: 18750457
Chris,
Have not tried your response yet, but very soon.  
Do you how to enable the FTP application inspection to allow the data channel to be opened dynamically?  Thanks again
0
 

Author Comment

by:JFowlerjr
ID: 18750616
Chris,
After entering this command, I got errors.  One error was at,  ...... tcp <outsideIP>, and the other error was at,.....any host.  Any thoughts?  Thanks again!
0
 

Author Comment

by:JFowlerjr
ID: 18750631
Sorry....forgot to mention that both errors were 'invalid input'.  Thanks
0
 
LVL 16

Expert Comment

by:InteraX
ID: 18751675
Sorry. The first line should be as follows.

static (inside,outside) tcp <outisdeIP> 21 <insideIP> 21
0
 
LVL 39

Expert Comment

by:PUNKY
ID: 18752687
Please see the link:

http://www.portforward.com/

Pick the equipment you have.
0
 
LVL 16

Accepted Solution

by:
InteraX earned 250 total points
ID: 18754871
Sorry I didn't have a chance to properly look at this again last night.

You nee to replace the <outsideIP> with your outside IP address. The same goes for the <insideIP>.

Also, try the below.

access-list <outside_int_ACL> extended permit tcp any host <outsideIP> eq 21
0
 
LVL 16

Expert Comment

by:InteraX
ID: 18754903
Unfortunately, the link PUNKY posted doesn't have the PIX/ASA devices on it.
0
 
LVL 16

Expert Comment

by:InteraX
ID: 18754907
BTW, Do you have a PIX or an ASA?

Also, which OS are you running?
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco ASA 5505's for VPN study 15 88
Copying out Cisco backups from SolarWinds 13 120
connect to cisco 2690 series 6 69
Cisco Nexus 5 55
Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
Many of the companies I’ve worked with have embraced cloud solutions due to their desire to “get out of the datacenter business.” The ability to achieve better security and availability, and the speed with which they are able to deploy, is far grea…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question