topic Re: pix 515e static problems in Network Security

pix 515e static problems

echelon360 — Fri, 21 Feb 2020 07:35:25 GMT

Need help with this guys

I've got two interfaces

interace inside 172.16.25.1 255.255.255.128 sec100

interface e4 172.16.25.193 255.255.255.224 sec10

i need to allow telnet in "e4" for hosts in "inside"

MY Config (disabled NAT in e4)

static (inside,e4) 172.16.25.0 172.16.25.0 netmask 255.255.255.0

That's all i've done.

Is this adequate or do i need to apply access-list to e4 to allow telnet.

I can't seem to get a ping response from inside host>e4 host

piseli — Tue, 24 Aug 2004 01:43:02 GMT

No choice, you need to add an access-list on the "e4" interface.

access-list telnet permit tcp 172.16.25.192 255.255.255.224 172.16.25.0 255.255.255.128 eq telnet

access-group telnet in interface e4

See:

sincerly

Patrick

echelon360 — Tue, 24 Aug 2004 02:04:22 GMT

Thanks patrick,pls check me on this.

i only need to allow telnet from any of the host in "inside" interface to a host (172.16.25.196) in the "e4" interface

access-list telnet permit (inside interface) (e4 host)

>> access-list telnet permit tcp 172.16.25.0 255.255.255.128 host 172.16.25.196 eq telnet

>>access-group telnet in interface e4