pix 515e static problems

[echelon360]

Need help with this guys

I've got two interfaces

interace inside 172.16.25.1 255.255.255.128 sec100

interface e4 172.16.25.193 255.255.255.224 sec10

i need to allow telnet in "e4" for hosts in "inside"

MY Config (disabled NAT in e4)

static (inside,e4) 172.16.25.0 172.16.25.0 netmask 255.255.255.0

That's all i've done.

Is this adequate or do i need to apply access-list to e4 to allow telnet.

I can't seem to get a ping response from inside host>e4 host

[piseli]

No choice, you need to add an access-list on the "e4" interface.

access-list telnet permit tcp 172.16.25.192 255.255.255.224 172.16.25.0 255.255.255.128 eq telnet

access-group telnet in interface e4

See:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a008009402f.shtml

sincerly

Patrick

[echelon360]

Thanks patrick,pls check me on this.

i only need to allow telnet from any of the host in "inside" interface to a host (172.16.25.196) in the "e4" interface

access-list telnet permit (inside interface) (e4 host)

>> access-list telnet permit tcp 172.16.25.0 255.255.255.128 host 172.16.25.196 eq telnet

>>access-group telnet in interface e4