Access-list question

h-kholghi · ‎06-16-2008

Hello,

We have a PIX 506 firewall and I need to allow a specific IP address, 141.157.129.77 to access a server inside the LAN on port #1999. I created a public IP address for the server but I am not so sure if the following command is correct.

access-list 101 permit tcp host 141.157.129.77 host â€œpublic ip address of our serverâ€ eq 1999

Thank you

dgroscost · ‎06-16-2008

Yes, that's correct.

You will need to apply the ACL to your outside interface -

access-group 101 in interface outside (as example)

Depending on your config, you may need to assign a static NAT to your server.

static (inside,outside) public.ip.address internal.ip.address netmask 255.255.255.255