?
Solved

PIX access list from outside to inside

Posted on 2007-08-09
5
Medium Priority
?
192 Views
Last Modified: 2013-11-16
Hi,

Am a newbie to the PIX. Wanted to know how to allow the PIX to allow access for port 8181 from outside to inside. Do I need to have an external IP address? I have a server that this access list can go to internally with a 192.168.X.X address. Any suggestions? Thanks.
0
Comment
Question by:abhijitm00
  • 3
  • 2
5 Comments
 
LVL 19

Accepted Solution

by:
nodisco earned 2000 total points
ID: 19666338
hi

you need an external ip address for the server to be available to the internet.  You can do it 2 ways - if you have a free ip address, you can translate your internal server to the free ip address and allow traffic accordingly.  If you only have one ip address and are using it for the PIX outside interface - you can port translate traffic on port 8181 to go to the internal ip.

For free ip address:
access-list fromoutside permit tcp any x.x.x.x eq 8181
static (inside,outside) x.x.x.x 192.168.x.x netmask 255.255.255.255
access-group fromoutside in interface outside

For using PIX interface ip
access-list fromoutside permit tcp any interface outside eq 8181
static (inside,outside) tcp interface 8181 192.168.x.x  8181 netmask 255.255.255.255
access-group fromoutside in interface outside

where x.x.x.x is the free public ip address and 192.168.x.x is the internal ip.  In the second example, type in the PIXs external ip address from outside your network and the PIX will redirect all port 8181 traffic to 192.168.x.x.

hope this helps
0
 

Author Comment

by:abhijitm00
ID: 19667504
Thanks nodisco, I will try this out and let you know.
0
 
LVL 19

Expert Comment

by:nodisco
ID: 19667579
cool
0
 

Author Comment

by:abhijitm00
ID: 19669747
Hey nodisco,

I entered the second command in and it keeps coming up with: "Type help or '?' for a list of available commands." as shown below. It will not let me proceed.
firewall> access-list out_in permit tcp any interface outside eq 8181
Type help or '?' for a list of available commands.
Thanks.
0
 
LVL 19

Expert Comment

by:nodisco
ID: 19673272
hi

you are not in global configuration mode

you need to type - enable and hit return
enter the enable password
then type conf t and hit enter

then enter the commands

when finished type write mem to save

hth
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes Administrators rights are not enough. These cases call for the SYSTEM account. The process in this article outlines the steps required to execute commands using the SYSTEM account.
With the evolution of technology, we have finally reached a point where it is possible to have home automation features like having your thermostat turn up and door lock itself when you leave, as well as a complete home security system. This is a st…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…
Suggested Courses

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question