Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.
Solved
Pix 506 E Multiple Port Configuration
Posted on 2013-01-04
Experts,
I have a client who is using a pix 506e as a firewall. They are getting a new phone system and the installing company has asked them to open the following ports:
5060 – UDP/TCP
• 5004 – UDP/TCP
• 10000-10201 - UDP
I was able to set these up in the access list by using a group-object based on this article:
http://www.experts-exchange.com/Hardware/Networking_Hardware/Firewalls/Q_23210702.html
However, at the bottom of this artilce, it states I have to manually static map each of the
200 plus ports in the 10000 - 10201 range. Here is the text from the above article:
object-group service group_1 tcp-udp
port-object range 1717 1723
access-list outside_access_in permit tcp any interface outside object-group group_1
but then you need a static for every port!!!
static (inside,outside) tcp interface 1717 10.10.10.4 1717 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 1718 10.10.10.4 1718 netmask 255.255.255.255 0 0
etc
There is no way of creating 1 static mapping - for ex>
static (inside, outside) tcp interface etc ......
to list all these ports ?
Please advise.
Thanks
John
I have a client who is using a pix 506e as a firewall. They are getting a new phone system and the installing company has asked them to open the following ports:
5060 – UDP/TCP
• 5004 – UDP/TCP
• 10000-10201 - UDP
I was able to set these up in the access list by using a group-object based on this article:
http://www.experts-exchange.com/Hardware/Networking_Hardware/Firewalls/Q_23210702.html
However, at the bottom of this artilce, it states I have to manually static map each of the
200 plus ports in the 10000 - 10201 range. Here is the text from the above article:
object-group service group_1 tcp-udp
port-object range 1717 1723
access-list outside_access_in permit tcp any interface outside object-group group_1
but then you need a static for every port!!!
static (inside,outside) tcp interface 1717 10.10.10.4 1717 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 1718 10.10.10.4 1718 netmask 255.255.255.255 0 0
etc
There is no way of creating 1 static mapping - for ex>
static (inside, outside) tcp interface etc ......
to list all these ports ?
Please advise.
Thanks
John
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
There’s a movement in Information Technology (IT), and while it’s hard to define, it is gaining momentum. Some call it “stream-lined IT;” others call it “thin-model IT.”
Powerful tools can do wonders, but only in the right hands. Nowhere is this more obvious than with the cloud.
Both in life and business – not all partnerships are created equal.
As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’
As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Suggested Courses
Course of the Month4 days, 8 hours left to enroll
660 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.