1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

How do I open ports on PIX Firewall?

Discussion in 'Networking (Hardware & Software)' started by MrKristoff, 2004/06/08.

Thread Status:
Not open for further replies.
  1. 2004/06/08
    MrKristoff

    MrKristoff Inactive Thread Starter

    Joined:
    2003/10/29
    Messages:
    3
    Likes Received:
    0
    I have a PIX 515 Firewall with a basic operational configuration installed. I have no access lists configured and am basically setup to allow all LAN users access to www, ftp, etc. but no outside access into the LAN. I need to open 4 TCP ports (1812, 1813, 9081, & 9082) for all LAN users. I tried using the following access-list setup:

    access-list acl_inside permit tcp 192.168.0.0 255.255.0.0 any eq www
    access-list acl_inside permit tcp 192.168.0.0 255.255.0.0 any eq 1812
    access-list acl_inside permit tcp 192.168.0.0 255.255.0.0 any eq 1813
    access-list acl_inside permit tcp 192.168.0.0 255.255.0.0 any eq 9081
    access-list acl_inside permit tcp 192.168.0.0 255.255.0.0 any eq 9082
    access-group acl_inside in interface inside

    Upon completing this, all users lost the ability to access the Internet, and I do not know whether or not this worked for the 4 ports in question because I had to remove the configuration changes to allow my users to receive their E-Mail and use the Internet.

    Am I missing anything? Did I not enter in the commands correctly for what I am trying to do? Is using access lists the right way to do this or should I be doing something else? Your assistance is greatly appreciated!
     
  2. 2004/06/08
    Newt

    Newt Inactive

    Joined:
    2002/01/07
    Messages:
    10,974
    Likes Received:
    2
    Let me point you to an excellent how-to article Here (with links to other articles of theirs).

    I think this will help you figure out not only this particular problem but give you a better feel for general care and feeding of PIX/Cisco access lists.

    Please post back if this doesn't help you.
     
    Newt,
    #2

  3. to hide this advert.

  4. 2004/06/24
    24jedi Lifetime Subscription

    24jedi Well-Known Member

    Joined:
    2002/06/19
    Messages:
    186
    Likes Received:
    0
    Here's a couple od additional websites to look at.

    CISCO.com , the KB here will have many sample config's
    routerie.com, Mostly routers but possibly some help.
    securityie.com, There is a forum category for PIX.

    good luck.
     
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.