• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 196
  • Last Modified:

PIX access list from outside to inside

Hi,

Am a newbie to the PIX. Wanted to know how to allow the PIX to allow access for port 8181 from outside to inside. Do I need to have an external IP address? I have a server that this access list can go to internally with a 192.168.X.X address. Any suggestions? Thanks.
0
abhijitm00
Asked:
abhijitm00
  • 3
  • 2
1 Solution
 
nodiscoCommented:
hi

you need an external ip address for the server to be available to the internet.  You can do it 2 ways - if you have a free ip address, you can translate your internal server to the free ip address and allow traffic accordingly.  If you only have one ip address and are using it for the PIX outside interface - you can port translate traffic on port 8181 to go to the internal ip.

For free ip address:
access-list fromoutside permit tcp any x.x.x.x eq 8181
static (inside,outside) x.x.x.x 192.168.x.x netmask 255.255.255.255
access-group fromoutside in interface outside

For using PIX interface ip
access-list fromoutside permit tcp any interface outside eq 8181
static (inside,outside) tcp interface 8181 192.168.x.x  8181 netmask 255.255.255.255
access-group fromoutside in interface outside

where x.x.x.x is the free public ip address and 192.168.x.x is the internal ip.  In the second example, type in the PIXs external ip address from outside your network and the PIX will redirect all port 8181 traffic to 192.168.x.x.

hope this helps
0
 
abhijitm00Author Commented:
Thanks nodisco, I will try this out and let you know.
0
 
nodiscoCommented:
cool
0
 
abhijitm00Author Commented:
Hey nodisco,

I entered the second command in and it keeps coming up with: "Type help or '?' for a list of available commands." as shown below. It will not let me proceed.
firewall> access-list out_in permit tcp any interface outside eq 8181
Type help or '?' for a list of available commands.
Thanks.
0
 
nodiscoCommented:
hi

you are not in global configuration mode

you need to type - enable and hit return
enter the enable password
then type conf t and hit enter

then enter the commands

when finished type write mem to save

hth
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now