cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
400
Views
0
Helpful
1
Replies

PIX firewall port mapping

parker.c
Level 5
Level 5

Working with a PIX running 6.1.3 and am trying to map tcp 7373 on an outside IP to telnet on an inside machine. I tried the following:

static (inside,outside) tcp 216.26.172.212 7373 198.135.95.2 telnet netmask 255.255.255.255 0 0

conduit permit tcp host 216.26.172.212 eq 7373 any

But for some reason this doesnt work.When I use the standard telnet port on both inside and outside it works fine. What am I missing here?

1 Reply 1

ehirsel
Level 6
Level 6

According to the cisco doc for pix 6.1 code, if you use statics you must use acls. See if you can remove the conduit and instead configure the following:

access-list outside_acl_01 permit tcp any host 216.26.172.212 eq 7373

access-group outside_acl_01 in interface outside

Then try your telnet to port 7373 of the 216.26 address.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card