Firewall command help Cisco 515e

[DooLocsta]

I need to know how to do TCP/IP port based filtering on a Cisco PIX 515e software is 6.3. Any help would be appreciated.

 

[blazeking]

Rememeber that anything you deny will explicitly allow everything else. A good rule is to deny everything, then permit specific ip/ports.

Here's the basic syntax:
pix(config)# access-list (acl_name) permit/deny tcp any host (ip address) eq (port)

So this is an example:
pix(config)# access-list external_acl permit tcp any host 192.168.1.101 eq ftp


You'll have to setup the access-group to the interface:

pix(config)# access-group (acl_name) in interface (interface_name)
example: access-group external_acl in interface external

Hope that helps!

 

[jvlazzar]

access lists...

cisco.com

netcraftsmen

 

[DooLocsta]

Thanks for the replies guys.