Learn how to a build a cloud-first strategyRegister Now


Pix 860 Series affecting port 2000 and 4600 traffic

Posted on 2009-12-22
Medium Priority
Last Modified: 2012-05-08
I have a Cisco 861 With a static IP, which is  part of a site to site VPN. Local HTTP traffic is routed thru the ISP's dns and not the base site.   I am using Millenium a Library Automation Program which communicates on Ports 2000 and 4600, they told me There is a known issue with cisco and the SCCP altering traffic on ports 2000 and 4600 which makes the program inoperable.  My firewall is turned off (so shouldn;t be a problem ), I can telnet to the Server IP on ports 2000 and 4600 and I can login no problem.  When running the java applet, it never gets this far, so something is altering the traffic on ports 2000 and 4600,  as this same machine works fine if i connect it directly without the router attached.   I have been trying to use the command  no fixup protocol skinny 2000 communicating via SSH to the router, it says Invalid Input detected at marker,  the marker is pointing to the X in fixup.  
Question by:j3rp1985
1 Comment
LVL 22

Accepted Solution

Jody Lemoine earned 2000 total points
ID: 26105938
You're using PIX commands on a Cisco Router, which is like using Linux commands on Windows.  The two are completely different devices.  I'm not sure how useful turning off the SCCP stuff is going to be for you, but if you want to do it on the 861, the following commands will cover it.

no ip nat service skinny tcp port 2000
no ip nat service skinny tcp port 4600

Whether you're using a PIX or a router, the "fixup" and "no ip nat service" commands only apply to traffic that is traversing NAT interfaces, which site-to-site VPN traffic doesn't usually do.  What sort of device are you using on the other end of your VPN?

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
Considering cloud tradeoffs and determining the right mix for your organization.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question