4

I have a Cisco PIX-515, version 6.3(4). I need to add a rule allowing the delivery of email from a series of IP addresses (e.g. XX.XXX.XXX.0/20). Is there a way to put such a rule into the PIX without individually entering each IP address?

3
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Aug 7 '17 at 17:57
  • I think the correct answer to this question is to buy an ASA. :) Jul 11 '18 at 18:07
  • Just how would the asa be different then a PIX with regards to this question ? Nov 5 '18 at 18:19
1

Try this:

object-group network My-LAN
 network-object 10.10.10.0 255.255.255.0
!
access-list My-ACL extended permit tcp any object-group My-LAN eq smtp
!
access-group My-ACL in interface My-Interfacename
!

you dont need to add this, i just want to share how to add the "interfacename":

interface Ethernet0.90
 vlan 90
 nameif My-Interfacename
 security-level 60
 ip address 10.10.10.1 255.255.255.0
!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.