[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 236
  • Last Modified:

Opening ports too difficult on Cisco PIX router

Well, I will try again. Very simple. How do I add an Access list, so I can receive traffic on a certain port like 443, etc. I get to the Cisco PIX 501 V6.3 and PDM V3 and the configuration screen and the Access tab. I then click on Rules and Add, and I am lost. Is that the window where I add incoming ports? If so, how do I do it exactly. I do not wish to do this at a command, only on the PDM if possible.

May I add this is the single hardest thing I have tried to learn to do. I cannot find a good article on it anywhere. It simply can't be that difficult, can it? Thaniks
0
Bert2005
Asked:
Bert2005
  • 2
1 Solution
 
drawlinCommented:
I enjoy the ease of the GUI also but never forsake the CLI.  GUI's change often, but the commands stay the same.  If you already have an access list configured, it is so easy to type "show access-list" and copy and paste that into a text file.  Then you can modify the ports and paste the command back into the CLI at the config terminal.

Something like

login, then:

enable
config t
access-list inbound allow tcp all 192.168.2.100 eq 443

you can find samples everywhere on the web for the syntax
0
 
mikebernhardtCommented:
You're in the right area. But before you click add a rule, you need to define the host you want to allow access to, under hosts and networks. Define it as part of the inside.

THEN add a rule and permit traffic from any on the outside to the host you just defined on the inside. Select tcp and the destination port.

If you want to allow a bunch of protocols to permit to the host, create a service group and list all the protocols. Then in your rule, permit the service group.
0
 
Bert2005Author Commented:
MIke,

Thanks. But, you still give me too much credit. I see a place where it says Source/Host Network with IP address configured by default. I then see Name and Group to the right. Below that is Interface which states "inside" with IP Address and Mask.

Is there where I define a host? And, if so, can you tell me in detail.

I apologize for my ignorance. At least I did purchase it, configure it and set up a VPN with it, but that was with a wizard.

Thanks.
0
 
mikebernhardtCommented:
You will find everything you need to know in this document:
http://www.cisco.com/application/pdf/en/us/guest/products/ps2032/c1626/ccmigration_09186a00804ec67b.pdf

It's a PDF, so you can download and print it.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now