How do I open ports 5000 & 5001?

[r.gera]

Please help.

Hi I'm new to this site. I need to open ports 5000 and 5001 on my Cisco PIX 501 to enable some users to be able to connect to our CCTV from outside, can anyone please advice how should I open these 2 ports?

any help is very appreciated.

Tks

[Collin Clark]

First create a NAT translation

static (inside,outside) tcp [public IP] 5000 [internal IP] 5000 netmask 255.255.255.255 0 0

static (inside,outside) tcp [public IP] 5001 [internal IP] 5001 netmask 255.255.255.255 0 0

Then create (if not already created) and ACL and apply to the outside interface-

access-list outside_access permit any host [public IP] eq 5000

access-list outside_access permit any host [public IP] eq 5001

access-group outside_access in interface outside

You should not use the any keyword if possible. Restrict down to the users public IP if possible.