connecting IP/port on the outside

Unanswered Question
Feb 26th, 2007

I'm pretty new to firewalls but I have a Pix-515E and I'm trying to have an inside machine telnet to a outside machine and port is there some place I can read to do this or can someone explain to me what I need to do? Thank you in advance

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
vitripat Mon, 02/26/2007 - 13:25

If you want a inside how be able to telnet to a host on the outside of PIX, all you need are translation rules for outbound connectivity from inside to outside.

For eg., following commands creates translation rules for whole inside network going outside. The internal network will be PATted to outside interface IP:

nat (inside) 1 0 0

global (outside) 1 interface



wgranada1 Mon, 02/26/2007 - 13:34

so if I wanted just one to one connection then I would need to do something like this?


global(outside) 100 interface

or do I need to put in the ip and port number of the machine I need to get to?

vitripat Mon, 02/26/2007 - 13:41

You dont need to care about the IP address of the destination. Here is the reason why-

- If you are on the inside interface, this interface by default has the highest security-level of 100. If from this interface you need to connect to any other host which would definately be on a lower security interface, all you need are translation rules for outbound connectivity. In following commands-


global(outside) 100 interface

Above commands tell that is a host on the inside network and will be translated to outside interface IP, when making outbound connections. Currently, as nat command specifies only a single host, no other host will be able to make outbound connections.

Let me know if this explains your concern.



wgranada1 Mon, 02/26/2007 - 13:44

Thank you sir I think this makes sense I will try this tonight and see if I understand what you are saying. thank you in advance!!!!


This Discussion