- Posts: 8
- Thank you received: 0
Opening PIX for Remote Desktop
- Daisan
- Topic Author
- Visitor
18 years 9 months ago #13089
by Daisan
Opening PIX for Remote Desktop was created by Daisan
Hi,
I wanted to open my PIX 525 so that I can Remote Desktop to any PC in my DMZ. Currently, I have only one available IP and using PAT to do this job. I thought I have done the right thing's but kept on falling. Anyone can tell me where did I when wrong...
Here the code I add to my PIX 525 :
name 10.88.88.20 IBMConsole
name 10.88.88.21 PCOne
access-list outside_access_in permit tcp any interface outside eq 3300
access-list outside_access_in permit tcp any interface outside eq 3301
static (dmz,outside) tcp interface 3300 IBMConsole 3389 netmask 255.255.255.255 0 0
static (dmz,outside) tcp interface 3301 PCOne 3389 netmask 255.255.255.255 0 0
I wanted to open my PIX 525 so that I can Remote Desktop to any PC in my DMZ. Currently, I have only one available IP and using PAT to do this job. I thought I have done the right thing's but kept on falling. Anyone can tell me where did I when wrong...
Here the code I add to my PIX 525 :
name 10.88.88.20 IBMConsole
name 10.88.88.21 PCOne
access-list outside_access_in permit tcp any interface outside eq 3300
access-list outside_access_in permit tcp any interface outside eq 3301
static (dmz,outside) tcp interface 3300 IBMConsole 3389 netmask 255.255.255.255 0 0
static (dmz,outside) tcp interface 3301 PCOne 3389 netmask 255.255.255.255 0 0
18 years 9 months ago #13168
by bimmer
Replied by bimmer on topic Re: Opening PIX for Remote Desktop
I have a PIX 515 and here is how I have them working:
access-list acl_dmzin permit tcp any eq 3389 host 111.222.333.444 eq 3389
static (dmz,outside) tcp 111.222.333.444 3389 NNNNNN 3389 netmask 255.255.255.255 0 0
where:
- 111.222.333.444 is the public IP address.
- NNNNNN is the server's host name in your PIX or the IP address in the DMZ.
- my acl_dmzin = your outside_access_in
access-list acl_dmzin permit tcp any eq 3389 host 111.222.333.444 eq 3389
static (dmz,outside) tcp 111.222.333.444 3389 NNNNNN 3389 netmask 255.255.255.255 0 0
where:
- 111.222.333.444 is the public IP address.
- NNNNNN is the server's host name in your PIX or the IP address in the DMZ.
- my acl_dmzin = your outside_access_in
Time to create page: 0.111 seconds