|
Firewall Wizards
mailing list archives
Re: Noob stuck becomes PIX admin overnight!
From: "Julian M D" <julianmd () gmail com>
Date: Thu, 22 Jun 2006 20:37:48 -0400
Hi,
You better make sure you use the same access-list name in case you
have one for the DMZ.
If you are still confused a bit, just sanitize and paste your config here!
Cheers,
On 6/22/06, Glock, Neil <Neil.Glock () vita virginia gov> wrote:
I have a PIX 515E v6.3(3) and am running PDM v3.0(1)
The PDM can cause problems so we don't use it.
I need to allow a device (IP 192.168.100.2) on the DMZ
interface to connect to a device (IP 192.168.10.1) on the
inside interface over a range of ports (14441 - 14450).
access-list <name-of-access-list-DMZ> permit tcp host 192.168.100.2 host
192.168.10.1 range 14441 14450
access-group <name-of-access-list-DMZ> in interface
<name-of-DMZ-interface>
Replace the names between "<" and ">" with names that apply to your
configuration. You may already have an access-group statement for your
DMZ interface but that is what applies it to the interface!
I have the skills to modify my current config using the
terminal, I can remove and modify, but I don't have the
skills to create yet. Could anyone configure the lines that I
could use to allow this?
Good luck!
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
By Date
By Thread
Current thread:
|