Discussion Locked

Open/Close ports on Router / PIX / Proxy

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,
What is the procedure to open port "1599" & close port (if opened by default) for users on a Nework connected to Internet thru a Cisco Router 2500, Cisco PIX 515 & Microsoft Proxy 2.0 Server in this order. These devices have valid IP addresses.
Do let me know the exact procedure for each one of them.
Regards,
Akash

5 replies

by jeremy the it guy

To open a port on a router you have to have an access list for that router. Once you telnet into your router and you want to make a change to it, you have to erase the current access list. Here's the step by step.
Once into the router, type show run. This will show you the running configuration. Under the Serial Interface, you will see "access-list". You will need to copy all of the "access-list" lines and paste them into notepad. Edit the notepad and put "no" in front of them all so that they look like "no access list". Now go back to your telnet session and type "config t" to go to terminal mode and then type "int s0" to set into serial mode. Now take the notepad with the edited access and paste it into the telnet session. Thisdeleted the access-list. Now go into the notepad and take out the "no" in front and add this line "access-list 101 permit tcp any host 65.116.245.2 eq 1599" where 101 is the access-list you have now. Hope this works. Jeremy

by Former member

Yeah, I'm a little confused by the first answer :)

ANyways, all ports on the 2500 are open by default, but to close a port on the 2500, use an access list. On the PIX, it's different. Ouotbound ports are all open automatically, inbound are blocked, traffic gets through by ESTABLISHED sessions only. TO open an inbound port on the PIX, use an access list to PERMIT the traffic. Like i said, outbound 1599 makes it regardless. On a Proxy server, don't know that it blocks anything by default...

This discussion is closed to new replies.