Re: Allow rdp access on pix 501
am 01.04.2008 23:12:04 von roberson
In article ,
joseph.rosario@gmail.com wrote:
>I am a general pix user who needs help with creating an accesslist
>command for port 1389 (rdp).
>Usually i send the vpn client with credentials to establish the vpn
>connection. I have the remote ip so i just need help creating the
>command to only allow this single remote ip
access-list out2in permit host XXX.XXX.XXX.XXX interface outside eq 1389
access-group out2in in interface outside
static (inside,outside) tcp interface 1389 YYY.YYY.YYY.YYY 1389
where XXX.XXX.XXX.XXX is the remote IP and YYY.YYY.YYY.YYY
is the internal IP of the system rdp is to be permitted to.
Note: if you have an existing access-group against your outside
interface, you will need to merge the access-list entry in to the
appropriate access-list.