Velocity Reviews

Velocity Reviews (http://www.velocityreviews.com/forums/index.php)
-   Cisco (http://www.velocityreviews.com/forums/f27-cisco.html)
-   -   Cisco Pix 515 Port forwarding range: 10000-50000 (tcp/udp) (http://www.velocityreviews.com/forums/t33210-cisco-pix-515-port-forwarding-range-10000-50000-tcp-udp.html)

Andras Kende 04-28-2004 11:54 PM

Cisco Pix 515 Port forwarding range: 10000-50000 (tcp/udp)
 
Hello,

I would like to do PAT port forward traffic from the outside to a
inside on
ports: 10000-50000 (tcp/udp)...

I do this for single port like:

access-list outside_access_in permit tcp any host 208.208.208.208 eq
80

static (inside,outside) tcp 208.208.208.208 80 192.168.1.5 80 netmask
255.255.255.255 0 0

But couldn't find anything how to use range in static..

Best regards,

Andras Kende
http://www.kende.com

Walter Roberson 04-29-2004 01:15 AM

Re: Cisco Pix 515 Port forwarding range: 10000-50000 (tcp/udp)
 
In article <c4997c55.0404281554.11fa73b0@posting.google.com >,
Andras Kende <andras@kende.com> wrote:
:I would like to do PAT port forward traffic from the outside to a
:inside on
:ports: 10000-50000 (tcp/udp)...

:static (inside,outside) tcp 208.208.208.208 80 192.168.1.5 80 netmask 255.255.255.255 0 0

:But couldn't find anything how to use range in static..

There is no way to use a port range in statics.

If you do not need the rest of the ports, then use a plain static and
adjust your outside ACL to deny the unwanted traffic.

If you *really* need to have a large range of ports go to one place,
and a different big range of ports go to a different place, then
you might be able to do it with PIX 6.3(3) using policy nat.
--
When your posts are all alone / and a user's on the phone/
there's one place to check -- / Upstream!
When you're in a hurry / and propagation is a worry/
there's a place you can post -- / Upstream!


All times are GMT. The time now is 08:32 AM.

Powered by vBulletin®. Copyright ©2000 - 2014, vBulletin Solutions, Inc.
SEO by vBSEO ©2010, Crawlability, Inc.