PIX 506 forwarding telnet port to home lab

Apr 25, 2007 2 Replies

I have been lucky enough to have been given a Pix 506. Im trying to open the telnet port (from any external IP) to allow access to my home lab. Im only on my CCNA 2 at the moment and just starting on ACL's. I think the problem is the static route's netmask which wont accept



255.255.255.0.

Any pointers would be great !



This is what I have on the pix at the moment:-



My 2511 router is on 192.168.1.111 !



access-list 101 permit tcp any host 192.168.1.111 eq telnet pager lines 24 mtu outside 1500 mtu inside 1500 ip address outside pppoe setroute ip address inside 192.168.1.3 255.255.255.0 ip audit info action alarm ip audit attack action alarm pdm logging informational 100 pdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0 0 0 static (inside,outside) tcp 0.0.0.0 telnet 192.168.1.111 telnet netmask 255.255.255.255 0 0 access-group 101 in interface outside



access-list 101 permit tcp any interface outside eq telnet

formatting link
static (inside,outside) tcp interface telnet 192.168.1.111 telnet

formatting link

Perfect ! Thanks, its now working a treat.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required