How to Open range of Ports on PIX 515 1

[mashadif]

Hi!

I want to open ports 5900 to 5920 on PIX 515 Firewall with a single command/access-list.

Can anyone help.

Regards,
Faheem

 

[wirelesspeap]

access-list test permit tcp any host 129.174.1.8 range 5900 5920

OR

object-group service abc tcp
port-object range 5900 5920
access-list test permit tcp any host 129.174.1.8 object-group abc

 

[mashadif]

Dear Wirelesspeap

Thanks a lot.

Faheem

 

[Subedei]

hello

I am trying to do something similar
I would like to forward traffic in the range 2300-2400 to a specific internal IP address. I have managed to do this with single ports (25, 80 etc) using the STATIC command but I can get the syntax right for a range.

Many thanks, in advance

Sub

 

[NetworkGhost]

There is no syntax for a range in the static command. What type of trafic is it?

 

[wirelesspeap]

Subedei,
I was told by Cisco Developer that the feature you asked
will be availble in version 7.2.x

 

[Subedei]

Hello,
Thanks for your responses.
The traffic is a game, Total Annihilation, which I play online. It needs that range of ports open for UDP and TCP. Using a conventional firewall/router (I am using a symantec 200 at the moment) it is just a case of setting up port forwarding.
We use cisco pix 515e at work, which we have recently had installed so I bought a 501 for home so that I can learn how to use them without messing with the live boxes, hence the 'non-work' need.
I could forward all traffic to the box and control it using access lists (i think!) but I also run an e-mail server at home which means I need the incoming traffic split between the two boxes.

Regards

Adam