FTP site

[j.rounkles]

I want to setup a ftp site on a server inside my Pix 501 (not on DMZ). What lines do I need to add to the Pix to allow incoming FTP requests?

[mrarahman · Accepted solution]

Hi Rounkles,

In order for outside world to connect to your inside servers or IP addresses you need to have "STATIC NAT" configured and then allow the outside world to access this servers on the outside interface for respective ports/services.

Try the following:

static (inside, outside) "NAT-IP" "FTP-server-IP"

access-list 101 permit tcp any "NAT-IP" eq ftp

access-group 101 in interface outside

HTH

MAR