DLSW and PIX

[rnarayana]

Is it possible to pass DLSW /SNA through PIX.If so can you please tell me how to configure it or is there any info in the Cisco site .Which ports should be opened on the Pix box.

Thanks.

[ytalibi]

I think it's possible to pass DLSW/sna through PIX.

you would open two ports on PIX 2065+2067 tcp and udp.

[pmoulay]

Yes, it is totally possible. Just done yesterday. Open tcp port 2065 (you might have to open also port 2067 - I did not need to).

We have SNA gateway and controllers behind the firewalls that need access to remote site and WAN IBM resources.

conduit permit tcp host A.B.C.D eq 2065

or

access-list 101 permit A.B.C.D whatever mask host A.B.C.D eq 2065

if everything works, sh dlsw circuit should work.