Cisco Pix how to allow traffic from only 1 outside ip address to one interal address

Posted on 2011-10-06
Medium Priority
Last Modified: 2012-12-23
Question: I have a cicso pix. I have one external ip address xxx.xxx.xxx.xxx, this translates to an internal ip address of I want to allow only traffic from yyy.yyy.yyy.yyy to pass through xxx.xx...
Question by:nycomputergeeks

Author Comment

ID: 36928404
Cisco Pix how to allow traffic from only 1 outside ip address to one interal address

Author Comment

ID: 36928407
Cisco Pix how to allow traffic from only 1 outside ip address to one interal address
LVL 35

Accepted Solution

Ernie Beek earned 1000 total points
ID: 36929693
access-list outside permit ip host yyy.yyy.yyy.yyy host xxx.xxx.xxx.xxx
access-group outside in interface outside
Assuming here you don't already have an access list for the outside interface and that the interface has the default name: 'outside'
LVL 12

Expert Comment

ID: 36934047
access-list outside_access_in permit tcp any host eq dns
access-group outside_access_in in interface outside
static (inside,outside) netmask 0 0

This configuration will allow DNS traffic to come into the firewall. This will also configure the nat translation to tell the PIX that is really

Expert Comment

by:Feroz Ahmed
ID: 36987226

To pass traffic from Internal Ip address through xxx.xxx.xxx.xxx you can configure policy map.The procedure to configure the same is as below:

ASA(Config-t)#policy-map global_policy
ASA(Config-t)#class Inspection_default
ASA(Config-t)#Inspect ICMP

once you are done with above configuration try to ping from Internal IP address to xxx.xxx.xxx.xxx to allow traffic .you should get ping response.

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
Considering cloud tradeoffs and determining the right mix for your organization.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question