Pix access control lists

Nov 09, 2007 3 Replies

hey,



I am having trouble with some pix access lists.



heres one of them



access-list outside_access_in permit udp 23.24.25.26 10.35.104.101 eq



2000

What I needed this access list to say permit udp port 2000 from



23.24.25.26 to 10.35.104.101


23.24.25.26- remote address



10.35.104.101 -inside my network

Many Thanks



Alex



Alex,

The address 10.35.104.101 is an rfc 1918 address. Have you a static translation on your firewall ? You would normally find that this address maps to a public / different IP on the outside of your firewall.

access-list outside_access_in permit udp host 23.24.25.26 host

10.35.104.101 eq 2000

access-group outside_access_in in interface outside

Regards

Darren

Alex schrieb:

You are missing either netmasks or the "host" keyword on both addresses. Try:

access-list outside_access_in permit udp host 23.24.25.26 host 10.35.104.101 eq

2000

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required