<div>
Create an access-list for the external host(s) and the internal host(s) needing secure FTP access. Provide the TCP ports as the action in the ACL:<br />
<br />
access-list acl_in permit tcp host &lt;external host&gt; host &lt;internal host&gt; eq ftp<br />
access-list acl_in extended permit tcp host &lt;external host&gt; host &lt;internal host&gt; range 1026 1040<br />
<br />
Apply the ACL to the outside interface and you're good to go.<br />

</div>


<div>
Thanks!<br />
When I try to add the second line I get:<br />
ERROR: &lt;extended&gt; not a valid permission.<br />
Any ideas on that?
</div>


<div>
<div class="content wysiwyg-content">
We have an application with a built in secure ftp client. The upload process is unable to complete due to the ports being blocked on the firewall. The firewall is a Cisco PIX 515E. The software is PIX Version 6.3(3). According to the software vendor ports 21 and 1026 thru 1040. I was just looking for a best practice in doing this. 
</div>
</div>


We have an application with a built in secure ftp client. The upload process is unable to complete due to the ports being blocked on the firewall. The firewall is a Cisco PIX 515E. The software is PIX Version 6.3(3). According to the software vendor ports 21 and 1026 thru 1040. I was just looking for a best practice in doing this. 

Create an access-list for the external host(s) and the internal host(s) needing secure FTP access. Provide the TCP ports as the action in the ACL:

access-list acl_in permit tcp host &lt;external host&gt; host &lt;internal host&gt; eq ftp
access-list acl_in extended permit tcp host &lt;external host&gt; host &lt;internal host&gt; range 1026 1040

Apply the ACL to the outside interface and you&#39;re good to go.


Thanks!
When I try to add the second line I get:
ERROR: &lt;extended&gt; not a valid permission.
Any ideas on that?

Trouble configuring FTP explicit SSL in passive mode

Networking software modules are interfaced with a framework implemented on the machine's operating system that implements the networking functionality of the operating system. The best known frameworks are the TCP/IP model and the OSI model. Systems typically do not use a single protocol to handle a transmission. Instead they use a set of cooperating protocols, sometimes called a protocol family or protocol suite.[9] Some of the best known protocol suites include: IPX/SPX, X.25, AX.25, AppleTalk and TCP/IP. Other protocols indirectly related to networking include the hypertext transfer protocol (HTTP) and its related technologies, Dynamic Host Configuration Protocol (DHCP), Domain Name Server (DNS) and other Internet protocols.

Networking Protocols

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).