Need Help With TELNET !!!!!

[wdelaney]

I am trying to let someone from the outside telnet in through a PIX 506 box. I added the ACL but they still cannot telnet in. Attached is a sample of the PIX configuration..(66.0.0.0 represents my public Ip address)

Could someone Please look at this and tell me what I'm doig wrong? Please Help!

no fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
names
access-list vpnacl permit ip 192.168.1.0 255.255.255.0 192.168.1.0 255.255.255.0

access-list 100 permit icmp any any echo-reply
access-list 100 permit icmp any any time-exceeded
access-list 100 permit icmp any any unreachable
access-list 100 permit gre any any
access-list 101 permit tcp any host 66.0.0.0 eq ftp
access-list 101 permit tcp any host 66.0.0.0 eq ftp-data
access-list 101 permit tcp any host 66.0.0.0 eq www
access-list 101 permit icmp any any echo-reply
access-list 101 permit tcp any host 192.168.1.11 eq telnet
pager lines 24
logging on
logging buffered informational
mtu outside 1500
mtu inside 1500
ip address outside 66.0.0.0 255.255.255.248
ip address inside 192.168.1.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
ip local pool vpnpool 192.168.1.29-192.168.1.30
pdm history enable
arp timeout 14400
global (outside) 1 interface
nat (outside) 1 192.168.1.0 255.255.255.0 0 0
nat (inside) 0 access-list vpnacl
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) tcp interface ftp 192.168.1.11 ftp netmask 255.255.255.2
55 0 0
static (inside,outside) tcp interface

http://www 192.168.1.35

http://www netmask

255.255.255.2
55 0 0
access-group 101 in interface outside
route outside 0.0.0.0 0.0.0.0 66.0.0.0 1

 

[watchguardmonkey]

you need to do a static NAT for the telnet through to the 192 address from an outside interface IP.

 

[tech1994]

I would discourage the use of telnet for this purpose, telnet traffic is sent in clear text. The prefered method is SSH.

----------------------
Cisco Forum | News

http://www.ciscohq.com