PIX 506 forwarding telnet port to home lab UPDATE

I have been lucky enough to have been given a Pix 506. Im trying to open the telnet port (from any external IP) to allow access to my home lab. Im only on my CCNA 2 at the moment and just starting on ACL's.

I have noticed that the ACL is being hit but the forwarding isnt working

pixfirewall# sh access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max

1024) alert-interval 300 access-list 101; 1 elements access-list 101 line 1 permit tcp any interface outside eq telnet (hitcnt=5)

Any pointers would be great !

This is what I have on the pix at the moment:-

My 2511 router is on 192.168.1.111

access-list 101 permit tcp any interface outside eq telnet pager lines 24 mtu outside 1500 mtu inside 1500 ip address outside pppoe setroute ip address inside 192.168.1.3 255.255.255.0 ip audit info action alarm ip audit attack action alarm pdm logging informational 100 pdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0 0 0 static (inside,outside) tcp interface telnet 192.168.1.111 telnet netmask 255.255.255.255 0 0 access-group 101 in interface outside

Reply to
boxers999
Loading thread data ...

Please ignore this thread, it took over 24 hours for my first posting to show. The problem is now fixed. see below for the changes (Static Route):-

access-list 101 permit tcp any interface outside eq telnet pager lines 24 mtu outside 1500 mtu inside 1500 ip address outside pppoe setroute ip address inside 192.168.1.3 255.255.255.0 ip audit info action alarm ip audit attack action alarm pdm logging informational 100 pdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0 0 0 static (inside,outside) tcp interface telnet 192.168.1.111 telnet netmask 255.255.255.255 0 0 access-group 101 in interface outside

Reply to
boxers999

Your changed (fixed) version appears to be identical to your version with the problem ?

Reply to
Walter Roberson

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.