HomeCisco networkingCisco firewallCisco PIX: Allow Traffic to an Internal Host

Cisco PIX: Allow Traffic to an Internal Host

The following tech-recipe describes how to permit selected traffic to an internal host.


First, a static mapping must be made for the host. There is another tech-recipe for this configuration.

static (inside,outside) 1.1.1.1 192.168.0.100 netmask 255.255.255.255

To allow traffic, a conduit must be constructed. For example, to allow ICMP (ping) traffic to all hosts from anywhere (bad idea), use the following:
conduit permit icmp any any

To allow SSH to a specific host from anywhere, use the following:
conduit permit tcp host 1.1.1.1 eq 22 any

With ACLs, type the following:

access-list 100 permit tcp any host 1.1.1.1 22
access-group 100 in interface outside

RELATED ARTICLES

LEAVE A REPLY

Please enter your comment!
Please enter your name here

- Advertisment -

Most Popular

Recent Comments

Cleveland Furia on How to Clear Google Activity
Sid Wohlfarth on How to Clear Google Activity
Riley Magsayo on How to Clear Google Activity
สมัครรับเครดิตฟรี ทันที on How to improve Remote Desktop Protocol Performance
Neal Wangstad on How to Clear Google Activity
Slavcho Andov on How to install Ubuntu
Slavcho Andov on How to fix bad sectors
Sheraz Ali on How to Backup Android