cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
512
Views
0
Helpful
1
Replies

PIX firewall port mapping

parker.c
Level 5
Level 5

Working with a PIX running 6.1.3 and am trying to map tcp 7373 on an outside IP to telnet on an inside machine. I tried the following:

static (inside,outside) tcp 216.26.172.212 7373 198.135.95.2 telnet netmask 255.255.255.255 0 0

conduit permit tcp host 216.26.172.212 eq 7373 any

But for some reason this doesnt work.When I use the standard telnet port on both inside and outside it works fine. What am I missing here?

1 Reply 1

ehirsel
Level 6
Level 6

According to the cisco doc for pix 6.1 code, if you use statics you must use acls. See if you can remove the conduit and instead configure the following:

access-list outside_acl_01 permit tcp any host 216.26.172.212 eq 7373

access-group outside_acl_01 in interface outside

Then try your telnet to port 7373 of the 216.26 address.

Review Cisco Networking for a $25 gift card