cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
281
Views
0
Helpful
2
Replies

Not access to external host

jjaime
Level 1
Level 1

Hi all ;

I need permit access on telnet and other protocols to external host ( 148.223.170.39 ) from my internal lan ( 172.16.133.0 )

The access by my server proxy works perfectly to Internet. ( http, ftp, https )

I have Pix 5.3 and CSPM 2.3.

The configuration of the CSPM is the following :

global (outside) 1 148.235.170.78 netmask 255.255.255.255

nat (inside ) 1 172.16.133.31 netmask 255.255.255.255 ( proxy server )

nat (inside ) 1 172.16.133.0 netmask 255.255.255.0

access-list CSM-acl-inside permit tcp 172.16.133.0 255.255.255.0 host 148.223.170.39 eq 23

I put to debug the pix but I do not see that open or close connections to the external host.

I am making something bad?

Thank you in advance for your help.

2 Replies 2

pferraz
Level 1
Level 1

How do you apply the access-list?

(There should be a line "access-group CSM-acl-inside ...")

Hi

Yes, I forget to mention it :

"access-group CSM-acl-inside-V1 in interface inside"

I remember to you that the CSPM apply the rules. I review the configuration that it generates .

Thanks a lot.