PIX 515e: access-list rule not working after reboot

Jan 03, 2008 3 Replies
L

Hi All



this is my configuration



static (inside,outside) tcp interface 10001 192.168.0.202 22 netmask



255.255.255.255 access-list OutsideToInside extended permit tcp any interface outside eq 10001 access-group OutsideToInside in interface outside

It works, I can reach my ssh server from outside (port 10001) to inside.



After store and reboot PIX says this:



Deny tcp src outside:x.x.x.x/35689 dst inside:192.168.1.6/10001 by access-group "OutsideToInside"



(192.168.1.6 is the IP Address of the PIX outside interface.)



and I can't delete the rule: # no access-list OutsideToInside extended permit tcp any interface outside eq 10001 specified access-list does not exist



but it's in show running-config..



Help me!



Vote
Twitter Facebook LinkedIn
G

Sal=FC ???

Why you give also the interface name in the access-list?

Try this: access-list OutsideToInside extended permit tcp any interface eq

10001

cu ivo

Vote
Twitter Facebook LinkedIn
L

Thanks for your reply

access-list OutsideToInside extended permit tcp any interface eq 10001 ^ ERROR: % Invalid Hostname

After the interface statement it expects the interface name.

This form seems to be working correct:

access-list OutsideToInside line 1 extended permit tcp any any eq

10001 access-group OutsideToInside in interface outside
Vote
Twitter Facebook LinkedIn
N

You're using a PIX 515e? Mind showing us the output of a 'sh nameif' or a 'sh access-group'? That way we could narrow down with access lists are associated with your PIX interfaces, or see their various security levels.

Vote
Twitter Facebook LinkedIn

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required