troubleshooting Question

Pix configuration to allow outside network access to inside Windows server

Avatar of Webcc
WebccFlag for United States of America asked on
RoutersWindows NetworkingHardware Firewalls
6 Comments1 Solution321 ViewsLast Modified:
Have the following network:

192.168.0.0 (subnet) -------- switch  (Windows Server 2003 & 6 workstations)
                                                |                                              
                                                |  (inside 192.168.0.254)
                                              PIX
                                                |  (outside 192.168.1.254)
                                                |
192.168.1.0 (subnet) -------- switch ---------- Internet router

Right now they are two seperate networks, but have the need to connect 3 users on the 192.168.0.0 subnet to not only connect to the Windows server (same subnet) but the Internet subnet as well.  Additionally, have 1 user on the Internet subnet who needs to get to the Windows server.  This is the owner and does not want to be on the 192.168.0.0 subnet (paranoid).   We have a Pix 501 lying around no $$ to purchase a router.  Placed in between the networks solves the problem, but cannot create access-list for 192.168.1.0 (outside) to access 192.168.0.0 (inside) Windows Server.

Tried:  
static (inside, outside) 192.168.0.200 192.168.1.100
access-list 101 permit tcp any host 192.168.0.200 eq 135
access-list 101 permit tcp any host 192.168.0.200 eq 139
access-list 101 permit udp any host 192.168.0.200 eq 137
access-list 101 permit udp any host 192.168.0.200 eq 138
access-group 101 in interface outside

Explanation:
192.168.0.200 = Windows server
192.168.1.100 = Outside user
Help!!
ASKER CERTIFIED SOLUTION
ErnieExpert

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 6 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 6 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros