Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PIX command issue

Hi All,

Can anyone help on this command,

access-list TCP_PORT_RANGE permit tcp host 202.187.24.90 host 192.168.199.90 range 5500 5800

nat (inside) 10 access-list TCP_PORT_RANGE outside

global (outside) 10 202.187.24.90

Can anyone explain how this can work?

Not very clear what can be done with this command.

Thank you.

Rgds,

Au Yeong Shaw Voel

1 REPLY
Gold

Re: PIX command issue

I think its misconfiguration a its not working

because ACL is in direction outside--->inside

and

NAT which is using this ACL in direction inside---->outside

So no traffic from access list TCP_PORT_RANGE cannot goes to inside interface and NAT rule cannot be aplied

M.

105
Views
0
Helpful
1
Replies