Port Forwarding on PIX 501 v 6.3.3

[nelifecare]

Hi,

I would like to port forward my Outside interface to an inside server. I can port forward individual ports without issue. I would like to know how to port forward a range.

Example:

object-group service Group1_TCP tcp
port-object eq h323
port-object range 5555 6555
port-object eq www
port-object eq https
port-object eq 5060
object-group service Group1_UDP udp
port-object eq 1719
port-object range 2326 3253
port-object eq 5060

access-list acl_outside permit udp host 65.202.44.2 object-group Group1_UDP any
access-list acl_outside permit tcp host 65.202.44.2 object-group Group1_TCP any

ip address outside xx.xx.xx.2 255.255.255.252
ip address inside 192.168.30.11 255.255.255.0

static (inside,outside) tcp interface 8000 192.168.30.8

http://www netmask

255.255.255.255 0 0
static (inside,outside) tcp interface https 192.168.30.75 https netmask 255.255.255.255 0 0
static (inside,outside) tcp interface

http://www 192.168.30.75

http://www netmask

255.255.255.255 0 0
static (inside,outside) tcp interface h323 192.168.30.75 h323 netmask 255.255.255.255 0 0
static (inside,outside) tcp interface 5555 192.168.30.75 5555 netmask 255.255.255.255 0 0
static (inside,outside) udp interface 2326 192.168.30.75 2326 netmask 255.255.255.255 0 0
access-group acl_outside in interface outside


I don't want to add separate lines for ports in range 5555 - 6555

Thanks

 

[unclerico]

unfortunately, you've got to do it for each port

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[Viconsul]

I agree with Unclerico completely, but if you have multiple public ips to play with, you could forward one external ip to your private ip, therefore automatically forwarding all the ports.