Allow access for a Group of Ports

I know how to all access for a single port but how would I give access for a port range?

I am working with SIP Extensions and need to allow udp ports as follows:

10000-20000
5004-5037
5039-5082

Can thes be put into a group and then give the group access? If so, can you supply me with the commands to do it.

The attached code is what I use for a single port.

static (inside,outside) tcp interface sip 192.168.20.12 sip netmask 255.255.255.255

Open in new window

Software FirewallsNetworking Hardware-OtherRouters

Last Comment

Bob

8/22/2022 - Mon

ravisimpi

7/24/2008

Yes you can configure port ranges in access list. But you can't do it the way you have mentioned in your question.. here is how you can do it.

config term
ip access-list extended
permit tcp range <1st port number in the range> etc etc....

If you can give me the IP address of the source and destination and then the port numbers what should be allowed between, then I can provide the complete configs...

Anyways I hope the syntax of the command will be helpful for you.

Bob

7/24/2008

ASKER

I want the source to be anywhere on the Internet with the destination of 192.168.20.210

The port are UDP 10000-20000 5004-5037 and 5039-5082

Thanks a million!!!

ASKER CERTIFIED SOLUTION

ravisimpi

7/24/2008

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

GET A PERSONALIZED SOLUTION

Ask your own question & get feedback from real experts

Find out why thousands trust the EE community with their toughest problems.

Bob