1. Home
  2. Cisco Systems
  3. walter , did I do this right ?

walter , did I do this right ?

access-list outside_access_in permit tcp any interface outside range 3060

3064

static (inside,outside) udp interface 3061 192.168.0.122 3061 netmask

255.255.25 5.255 0 0 static (inside,outside) udp interface 3060 192.168.0.122 3060 netmask 255.255.25 5.255 0 0 static (inside,outside) udp interface 3062 192.168.0.122 3062 netmask 255.255.25 5.255 0 0 static (inside,outside) udp interface 3063 192.168.0.122 3063 netmask 255.255.25 5.255 0 0 static (inside,outside) udp interface 3064 192.168.0.122 3064 netmask 255.255.25 5.255 0 0

It works - but I always wonder ....

Reply to
Barret Bonden
Loading thread data ...

In article , Barret Bonden wrote: :access-list outside_access_in permit tcp any interface outside range 3060 3064

:static (inside,outside) udp interface 3061 192.168.0.122 3061 netmask

255.255.255.255 0 0 :static (inside,outside) udp interface 3060 192.168.0.122 3060 netmask 255.255.255.255 0 0

:It works - but I always wonder ....

I was about to say, "Looks okay to me, as long as there is an

access-group outside_access_in in interface outside "

but then I noticed a problem.

Your ACL entry permits tcp, but your static's are for udp.

Reply to
Walter Roberson

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.