Thanks guys, your pointers all clicked at what I needed to do:
access-list inbound line 1 permit tcp any interface outside eq 5900 (hitcnt=1)
Keep up the good work :)
Think I understand what you meant but that doesn't work..
I added:
access-list inbound permit tcp any host 192.168.1.1 eq 5900
and still get the error:
305005: No translation group found for tcp src outside:192.168.1.150/46622 dst inside:192.168.2.200/5900
The hit count for the original...
Not sure I understand, this is what the 'inbound' ACL is mapped to:
access-group inbound in interface outside
Could you expand on what you mean?
Thanks
It is quite possible the PIX does not like the MAC address if it doesn't start with 00: as almost all MACs do. As for a solution... change the MAC to begin with 00.
Hey All,
Been bashing my head over this for an hour now and it's not making sense... All i'm trying to achieve is a simple forward of port 5900 to 192.168.2.200 but the error log shows this:
305005: No translation group found for tcp src outside:192.168.1.150/44718 dst...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.