Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Help with configuring a single port forwarding rule on PIX 525?

Status
Not open for further replies.

tregas

IS-IT--Management
Feb 9, 2010
12
US
I'm a Windows admin and I'm mostly UI bound. I mention this because the bulk of configuration assistance I've seen is offered in terminal config strings. I do not have the ability to do that and feel confident that I'm not breaking the existing configuration. I'm sorry if I sound hostile, but this has been a very long, drawn out issue which desperately needs a resolution where nobody seems to be able to provide one.

Now, on to the issue. We have a public IP from Cox Cable which comes through a Motorola cable modem into our PIX which then serves up network access to our LAN. Standard config.

I am configuring a new tool to provide remote support services to clients. Initially I am testing it on my workstation which has a static IP of 192.168.2.150/24. I need to open port 831 for Advantig's DualDesk product.

I have created a Global Service Object configured with port tcp/831.

I created an incoming rule on our WAN initially configured for ANY-ANY for the service. Failed.

I then created Source for WAN and Destination for an object I added which is my workstation. Failed.

I reversed that. Failed.

I did all this on the LAN side. Failed. Both WAN and LAN. Failed.

I used to set up PIX devices a few years ago and I don't recall it being this hard. I also set up SonicWALL devices, and even though the config is harder, the result is easier to achieve.

What am I doing wrong? What do I need to supply in order for you to tell? If I send you the config, I'd have to sanitize it and I can't see how that would help.

Any help at all, aside from suggestions of anger management classes or suicide, are deeply appreciated.

Tyler

---
Tyler Regas - Nerd. Writer.
 
I figured it out. I opened up YouTube, searched for "cisco pix port forwarding", watched a quick video with horrible music, and gave it a shot. I know I'd tried that existing configuration, but don't know why it didn't work before. Also, the video was for an ASA device with more recent ASDM, but I was able to figure it out.

---
Tyler Regas - Nerd. Writer.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top