topic Pix firewall issue in Network Security

Pix firewall issue

lecarbajalp — Tue, 12 Mar 2019 01:27:07 GMT

Hello,

I'm trying to configure some firewall rules and a nat in our pix 525 and I'm having some issue with the connection

Here are the details:

172.40.40.40 destination host.

1.- I configured an ACL

ACL test 172.80.0.0 255.255.0.0 destination 172.40.40.40

ACL test 172.90.0.0 255.255.255.0 destination 172.40.40.40

inside interface IP 172.20.20.20

outside inteface IP 192.169.1.2

interfaces inside outside (ping and icmp are allow)

static (outside, inside) 172.40.40.40 172.40.40.40

nat (outside) 5 access-list test

global (inside) 5 interface

route inside 172.40.40.40 255.255.255.255 172.30.30.30

route outside 172.80.0.0 255.255.0.0 192.168.1.1

route outside 172.90.0.0 255.255.0.0 192.168.1.1

I'm trying to nat the traffic comming from the outside interface because we want to avoid interal ip conflicts, I'm seeing the hits on the ACL

but can not telnet from 172.80.0.1 to 172.40.40.40 , there are routes and porta enable for that connection

and my flag logs shown me SaAB from the destination host, what could be the problem?

We can ping between the destination host and the pix inside interface and the icmp is allow in all the interfaces.

Pix firewall issue

Julio Carvajal — Fri, 12 Apr 2013 04:36:43 GMT

Hello,

Here is what you need:

no static (outside, inside) 172.40.40.40 172.40.40.40

static (inside,outside) 172.40.40.40 172.40.40.40

nat (outside) 5 access-list test outside

Let me know how it goes.. ALSO remember to rate all of the helpful posts "D

Pix firewall issue

lecarbajalp — Sat, 13 Apr 2013 18:21:54 GMT

Hello Thank you for your help, we will try to apply that command in our test .

About our test the incoming connection from 172.90.0.0 are telnet session to 172.40.40.40

So we are doing a PAT for those connection (172.90.0.0 PAT to 172.30.30.29) my question is that kind of scheme and configuration is supported on Pix Firewall?

Here is the version: PIX 525

Cisco PIX Firewall Version 6.3(5)

This is the path

MPLS PIX Destination HOST

subnet 172.90.0.0/16 ---- ------------------------- ACL TEST -PAT(172.30.30.29 inside inteface) -------- 172.40.40.40 port 25

Pix firewall issue

Julio Carvajal — Sat, 13 Apr 2013 20:33:11 GMT

Hello,

What you are doing is supported,

Change those things and provide me the result,