Cisco PIX 515 version 6.3(3)
We have a hearing impaired employee who requires a VRS. The port requirements for communication are:
IN: 1720 TCP, 15328-15333 TCP/UDP
OUT: 1024-65535 TCP/UDP, 21, 389
I can't get this thing to work. I'm scratching my head trying to figure out how to do this. They are able to get out (the people on the other end can see us) but communication cannot find its way back in (we cannot see them).
Here is what the firewall is throwing back:
%PIX-2-106001: Inbound TCP connection denied from (outside ip address)/1720 to (our outside global address)/63666 flags RST ACK on interface outside
%PIX-3-106011: Deny inbound (No xlate) udp src outside:(outside ip address)/15332 dst outside:(our outside global address)/15332
I have this so far:
outbound 1 deny 0.0.0.0 0.0.0.0 0 ip
outbound 1 except (inside VRS camera IP) 255.255.255.255 0 tcp
outbound 1 except (inside VRS camera IP) 255.255.255.255 0 udp
apply 1 outgoing_dest
I've tried various commands to get the communication coming in. I won't bother posting that since it obviously doesn't work. I would like for those ports to only be open to the VRS camera device. Can anyone help me out with this please? They are waiting on me.
