PIX 501 6.1(4)

[terry.osenbach]

Hello. I need the config lines to open up port 80 for UDP and TCP for the 6.1.4 version of the PIX 501.

I don't know if the static (inside,outside) commands work with my version, and do I need an access-list or access-group for this command? I have a cable modem, and only one connection to this port is ever needed. I know it's basic, but I ncan't figure it out. Thanks -

[pcomeaux]

You may want to use the pix device manager to make this work. It'll provide you a GUI to make these changes. http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/products_installation_guide_chapter09186a008017a422.html

Access-groups are applied to the interfaces.

Access-lists are referred to by the access-groups.

Statics provide the translation to access your host.

Suppose your inside host has an address of 192.168.100.10 and your outside IP is 64.100.100.64, you configuration would look as follows:

static (inside, outside) 64.100.100.64 192.168.100.10

access-group OUTSIDE in interface outside

access-list OUTSIDE permit tcp any host 64.100.100.64 eq 80

access-list OUTSIDE permit udp any host 64.100.100.64 eq 80

Hope this helps,

peter

[terry.osenbach]

Will verify it this weekend. Thanks again for the help!

If I wanted to open the port 443 too, would I just add two more access-list commands for those ports?