We help IT Professionals succeed at work.

Port Forwarding Config

ejaramillo
ejaramillo asked
on
Hello,

I have a older pix 501 that I use at home for my firewall. I have a dynamic IP address so I'm using the following config for port fowarding:

static (inside,outside) tcp interface 3389 192.168.1.100 3389 netmask 255.255.255.255 0 0
access-list outside_in permit tcp any interface outside eq 3389
access-group outside_in in interface outside

If I also wanted to port forward port 21 to the same internal IP address that I'm already forwarding port 3389, how can I accomplish this?

Thanks!
Comment
Watch Question

Senior infrastructure engineer
CERTIFIED EXPERT
Top Expert 2012
Commented:
Almost the same:

static (inside,outside) tcp interface 21 192.168.1.100 21 netmask 255.255.255.255 0 0
access-list outside_in permit tcp any interface outside eq 21
Ernie BeekSenior infrastructure engineer
CERTIFIED EXPERT
Top Expert 2012

Commented:
Though you might need:

fixup protocol ftp 21

as well.

Author

Commented:
I'm retarted - I hate this old IOS. I did:

static (inside,outside) tcp interface 21 192.168.1.100 21 netmask 255.255.255.255


I guess since I didn't add 0 0 at the end it gave me an error. I guess I'm just used to the new IOS version.

Thanks dude!
Ernie BeekSenior infrastructure engineer
CERTIFIED EXPERT
Top Expert 2012

Commented:
:)

You're welcome. Still working with old and new versions so even though I try to forget the old ones, I can't ;)

Thx for the points.

Explore More ContentExplore courses, solutions, and other research materials related to this topic.