SNA trafiic trhough PIX firewall

[nkariyawasam]

Is there any way to allow native SNA traffic ( IEEE802.2 LAN) to pass through

a PIX firewall ?

If so, what is the PIX config ?

[ytalibi]

yes you can allow this by openning tow ports 2065 and 2067 tcp and udp.

[ytalibi]

conf pix

access-list acl_in permit tcp x.x.x.x x.x.x.x any eq 2065

access-list acl_in permit udp x.x.x.x x.x.x.x any eq 2065

access-list acl_in permit tcp x.x.x.x x.x.x.x any eq 2067

access-list acl_in permit udp x.x.x.x x.x.x.x any eq 2067

access-group acl_in in interface inside

[nkariyawasam]

I think you are referring to the DLSw traffic, once encapsulated in to TCP . But, what I need to do is, without any encapsulation, to pass the NATIVE SNA traffic on LAN through the firewall. I bilieve that there should be some kind of bridging. Any ideas ?

[rsissons]

I do not believe this is possible. The PIX is a router rather than a bridge.