Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco PIX - ACL to permit range

I have an old Cisco pix 515r v6.3

I need to permit a range of IP's to our mail server on port 25 (only this range should be able to access PORT 24 on the mail server). I'm not very familiar with the PIX, so any help with this would be appreciated. What would the command look like?

Thanks!

2 REPLIES

Re: Cisco PIX - ACL to permit range

You can create an object-group.

object-group network permit_smtp

network-object host 1.1.1.1

network-object host 2.2.2.2

network-object 4.4.4.0 255.255.255.0

Then you apply the object group in the ACL.

access-list outside_access extended permit tcp object-group permit_smtp host [your host] eq 24

Hope that helps.

New Member

Re: Cisco PIX - ACL to permit range

Thank you very much! That works perfectly.

338
Views
0
Helpful
2
Replies