OT: Question on PIX access

From: Elias Udechime (euchime@xxxxxxxxx)
Date: Thu May 30 2002 - 19:28:19 GMT-3

• Next message: Nate Van Maren: "Re: connecting a 2511 async port to a CAT5500 or a 4500"
• Previous message: Malcolm Price: "connecting a 2511 async port to a CAT5500 or a 4500"
• Next in thread: Craig King: "Re: OT: Question on PIX access"
• Maybe reply: Craig King: "Re: OT: Question on PIX access"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
Hi all,

How can you explain these PIX configs. I have been to
CCO, but did not drill it down to IP granu sh*t

conduit permit tcp 172.206.25.63 255.255.255.224 range
5631 5632 206.253.221.0 255.255.255.0

I thought this is only permiting the entire network
206.25.21.0 access only to specific host
172.206.225.63.

For some unforseen obvious reason, I am getting access
to more than that.

Could someone tell me what is going on?

I am thinking that this command:
route outside 0.0.0.0 172.206.225.1 (.1 is the
internal network HRSP default getway)which is between
the Internet router.

internal---PIX-----HSRP-----IneterRouter----Internet

Thanks for your help

• Next message: Nate Van Maren: "Re: connecting a 2511 async port to a CAT5500 or a 4500"
• Previous message: Malcolm Price: "connecting a 2511 async port to a CAT5500 or a 4500"
• Next in thread: Craig King: "Re: OT: Question on PIX access"
• Maybe reply: Craig King: "Re: OT: Question on PIX access"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:59:12 GMT-3