topic Re: Telnet through PIX in Network Security

Telnet through PIX

mrii — Fri, 21 Feb 2020 07:48:39 GMT

I just installed my first PIX. 506E connected to a 2621. Everything seems to be working fine, so far. But I'm sure I got some tightening up to do. I would like to telnet the 2621, can anyone share the commands I would need to allow me to telnet the 2621 thru the PIX ? Obviously it would be passing thru the outside interface,, thanks a bunch

Ray

Re: Telnet through PIX

aftermath — Thu, 16 Dec 2004 00:30:46 GMT

The following links wil provide the information you need.

Also, the prefered method for accessing a PIX is through SSH ( putty ) instead of telnet.

For the 2621

http://www.cisco.com/en/US/products/hw/routers/ps259/products_user_guide09186a00800a9604.html

For the PIX.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a00800eb729.html

HTH

Re: Telnet through PIX

mrii — Thu, 16 Dec 2004 02:25:26 GMT

Not exactly what I needed, but good stuff none the less, appreciate it!!

What I want to accomplish is to telnet the 2621 from the inside, ofcourse this means going thru outside interface on PIX. I use SSH to get to PIX, I need to telnet the 2621 for management and monitoring purposes. I was thinking an access-list, makes sense?

Thanks again

Ray

Re: Telnet through PIX

Patrick Iseli — Thu, 16 Dec 2004 03:13:37 GMT

If you have configured PAT or NATt to allow outbound traffic and you did not specify an access-list that blocks it, it should work without modifying your configuration.

PAT - Port Address Transaltion looks like:

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

Why: From a higher security level as the inside interface to a lower security level as the outside interfce, access is granted if it is not specially blocked by an inside access-list.

See: PIX Establish connectivity

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a0080172786.html#wp1112345

As it depends a lot of your configuration is suggest you to try if it works, if not post your configuration so that we could really help you to configure your device.

sincerely

Patrick