Ports to be unblocked.

Question

I need to provide access to certain machine ips(source) to access other ips(destination) of different classess for the ports mentioned 22, 21, 80 , 3389, 3000, 443,8080, 8443 , 8000-65535 in my corporate firewall. Can you please give me the commands to be executed ?

Answer 1

Hi Ravi,
Lets assume your inside interface name is " inside" and outside interface name is " outside ".
Here you need to permit traffic from your destination IPs to your source IPs also open these ports for that communication.
First create a opbject group for ports
object-group service EXTERNAL_TO_INTERNAL tcp
description EXTERNAL TO INTERNAL
port-object eq 22
port-object eq 21
port-object eq 3389
port-object eq 3000
port-object eq 8443
port-object range 8000 65535
2. Create a object group for the destination IPs
object-group network DESTINATION_PUBLIC_IPS
network-object 79.105.0.0 255.255.192.0
network-object 214.182.224.0 255.255.240.0
network-object 204.236.128.0 255.255.192.0
network-object 107.12.0.0 255.255.0.0
3. Create ACL
access-list out-in permit tcp object-group DESTINATION_PUBLIC_IPS host 172.19.26.72 object-group EXTERNAL_TO_INTERNAL
access-list out-in permit tcp object-group DESTINATION_PUBLIC_IPS host 172.19.31.82 object-group EXTERNAL_TO_INTERNAL
4. Bind to outside interface
access-group in interface outside
i think it will work. Please try it and rate this post if it is helpful.
Thanks
Vipin