PIX 515E Access List Issues
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-24-2011 09:30 PM - edited 03-11-2019 02:16 PM
hey gents,
I know this has been asked many many times I just wanted to verify the below config should work before I set it on our prod FW
I am trying to allow SSH (TCP) access to an internal IP (10.0.0.170) via a spare Public IP (203.0.89.89) heres what I could come up with;
access-list outside_access_in extended permit tcp any host 192.168.1.5 eq ssh
static (inside,outside) 10.0.0.170 203.0.89.89 netmask 255.255.255.255
access-group outside_access_in in interface outside
static (inside,outside) TCP 10.0.0.170 2022 203.0.89.89 22 **
**Do I need to set port redirection at all seeing as though I am accessing it through a spare Public IP? or am i completely on the wrong track?
would be thankfull for any advice, much appreciated.
- Labels:
-
NGFW Firewalls

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-24-2011 09:35 PM
HI David,
Here's all what you need for accessing ssh from outside:
access-list outside_access_in extended permit tcp any host 203.0.89.89 eq ssh
access-group outside_access_in in interface outside
static (inside,outside) tcp 203.0.89.89 22 10.0.0.170 22
what this static command would do is, it would do port re-dircetion, request coming in on the public ip on port 22 would be forwarded to your private ip on port 22. Port re-direction should be fine, as it would save you the public ip, you can use the same public ip for another host on another port.
Let me know if you have any questions.
Thanks,
Varun
Varun Rao

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-24-2011 09:39 PM
Here are a few docs for nat statements:
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008046f31a.shtml
How to do port forwarding on PIX/ASA:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708b4.shtml
Thanks,
Varun
Varun Rao
