Problem with PIX access to SSH

[CocoSavage]

Hi,

Our pix is working fine with our current ACL's but when I add a new one like:

access-list outside_access permit tcp any host xxx.xxx.xxx.xxx eq 22/ssh

It doesnt work. This is for any port/protocol. The log records:

Deny TCP(no connection) from yyy.yyy.yyy.yyy/2543 to xxx.xxx.xxx.xxx/22 flags RST on outside interface

Is there something I am missing with adding a new ACL, is there something else I need to do to enable it other then add it and clear xlate?
Any help would be great

thanks

coco

 

[LedZepRock]

Hi

Have you got your static setup?? ie..

static (inside,outside) <external IP> <internal IP>

also does it use NAT??

Simon

 

[CocoSavage]

Yep,

I have the static mapping and it does use NAT

coco