PIX 535: port forwarding newb problem

Mar 05, 2006 1 Replies

Hi folks, I need some help.



Trying to setup port forwarding for an app. for the first time on a



535:

I need to port forward a DMZ subnet on int dmz_v904 (eth3), forwarding all ports >1023 to host A.A.A.A to port 60199 on inside int (eth1).



e.g.



name A.A.A.A server



object-group network vpn-pool description *** VPN dial client pool addresses *** network-object B.B.B.B 255.x.x.x object-group service Tivoli tcp port-object eq 60199


*********THIS IS WHERE I NEED HELP****************

access-list dmz_v904 permit tcp object-group vpn-pool host A.A.A.A gt



1023 access-list inside permit tcp host aansso1tmra00 object-group vpn-pool object-group Tivoli

is my syntax correct? and what else must I do?



All help very much appreciated.



Think I've sorted the problem with the help from a friend.

Was told I only need to apply one rule to the source interface, as below:

access-list dmz_v904 permit tcp object-group vpn-pool host A.A.A.A eq

60199

This should forward all permitted source subnet traffic on TCP 60199 to the destination A.A.A.A server on the inside interface.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required