Solved: Pix access lists

hinesd · ‎11-11-2003

I am faced with converting the conduit statements on our PIX 520 to access-lists. Is there a preferred way to do this will as little interuption to traffic as possible? For example, do I create the access-lists, then remove the conduit, or the opposite?

Secondly, is there a recommended precedence in the ordering of the access-list?

jmia · ‎11-11-2003

Hi,

Here's a very good document on converting conduits to ACLs, also when writing ACLs always have your most important ACLs on top of the list as ACLs work from top down. When you make changes to ACLs or Static lines always issue command clear xlate and save with command write memory.

http://www.giac.org/practical/GSEC/Bill_Donaldson_GSEC.pdf - By Bill Donaldson, GSEC.

If you need more inf/help then let me know.

Thanks / Jay.

View solution in original post

jmia · ‎11-11-2003

Hi,

Here's a very good document on converting conduits to ACLs, also when writing ACLs always have your most important ACLs on top of the list as ACLs work from top down. When you make changes to ACLs or Static lines always issue command clear xlate and save with command write memory.

http://www.giac.org/practical/GSEC/Bill_Donaldson_GSEC.pdf - By Bill Donaldson, GSEC.

If you need more inf/help then let me know.

Thanks / Jay.

lwierenga · ‎11-11-2003

Below is the url for Cisco's conduit to acl conversion tool:

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cw2000/mgt_pix/pix_111/user_gd/px_conv.htm

If this answer your question please close and rate