Pix 506E Portfowarding

[martin.schwab]

Hi,

I have a PIX 506E with one Public IP-Adress. Now I want to connect to a Terminalserver behind the PIX. I try a config with static, but it doens´t work.

Can someone tells me how I must configure this with the pdm ????

many thanks

Martin

[jmia]

Martin,

Here you go...

> access-list outside_in permit tcp host host eq 3389

> access-group outside_in in interface outside

You could also use for the above ACL, keyword 'any' but personally I would use host-to-host for security, this way I know who is allowed to come into my network on port 3389.

> access-list outside_in permit tcp any host eq 3389

> access-group outside_in in interface outside

Now you'll need to port map the above with a static statement:

> static (inside,outside) tcp interface 3389 3389 netmask 255.255.255.255 0 0

*NOTICE - the word 'interface' this corresponds to your pix outside interface IP address as you only have one public IP address.

All of the above needs doing in config mode and save with: write mem and also issue: clear xlate

Hope this helps and let me know how you get on, if it does help please rate post as others might be looking for the same solution.

Jay

[martin.schwab]

Hi jay,

many thanks for your help.

The problem was the IP Port not the config ;-)

br Martin