access-lists

[brk1221]

Hi, I have limited experience working with access-lists. I have a PIX with vpn and I need to filter some incoming traffic. Do I need to copy the list into notepad, make my change and then copy it back in by right clicking? Any good resources available for learning to work with acl's?

Thanks
Tim

 

[tjbradford]

this is the wrong section of the forum , repost it cisco ios firewall that will get you a solution

 

[burtsbees]

Actually, copy start tftp (with a tftp server daemon running in the backround of the computer connected to the PIX) and you can edit with Wordpad (NOT notepad). That's the easiest way for what you want to do. However, a lot of us in here like the CLI...do you need syntax for certain PIX Finesse code ACL's?

Burt

 

[brk1221]

Yes , I'm trying to modify access-list 142 in the config. So I would type for instance:

access-list 142 permit ip host 172.17.1.5 10.100.2.0 255.255.255.0 eq smtp

but the command won't take.

any help would be appreciated

Thanks

 

[burtsbees]

As far as I know, you cannot have a numbered acl in a PIX---they must be named.

Burt

 

[brk1221]

Maybe it's time to retire the old PIX. I'm thinking ASA or Sonicwall SSL-VPN

 

[tjbradford]

ASA of course offers a nice gui for the user , but the underlaying configs are almost the same, you can prob get an asdm for your pix which will make management much easier.

http://www.cisco.com/en/US/products/ps6121/index.html

 

[brk1221]

I tried but I don't have the necessary credetials to download that software. It said I need a service agreement.

Thanks

 

[burtsbees]

If you get an ASA, it will come with ASDM.

Burt

 

[tjbradford]

just have a google about , there will be a source to download the asdm client, what version of ios are you running on your pix ?

 

[Viconsul]

brk1221

Before you go trawling the internet, you need to find out the verion of FOS runing on your pix. Up to 6.3.5 you will need PDM and ASDM for 7.0.1 and above.

HTH

-Viconsul

 

[brk1221]

How do I determine thr version of FOS?

 

[burtsbees]

sh ver

Burt

 

[brk1221]

Cisco PIX Firewall Version 6.3(5)

 

[burtsbees]

You need PDM.

Burt

 

[brk1221]

Thanks

 

[tjbradford]

does anyone have a ftp server that could give me write access to ?

 

[burtsbees]

Why?

Burt

 

[tjbradford]

if it sits there long enough someone might drop the required file on there

 

[burtsbees]

timandlizh at gmail dot com