I am a general pix user who needs help with creating an accesslist
command for port 1389 (rdp).
Usually i send the vpn client with credentials to establish the vpn
connection. I have the remote ip so i just need help creating the
command to only allow this single remote ip

In article <da87180a-a4f5-4d93-89da-874218e1726c [at] m71g2000hse.googlegroups.com>,
joseph.rosario [at] gmail.com <joseph.rosario [at] gmail.com> wrote:
>I am a general pix user who needs help with creating an accesslist
>command for port 1389 (rdp).
>Usually i send the vpn client with credentials to establish the vpn
>connection. I have the remote ip so i just need help creating the
>command to only allow this single remote ip


access-list out2in permit host XXX.XXX.XXX.XXX interface outside eq 1389
access-group out2in in interface outside
static (inside,outside) tcp interface 1389 YYY.YYY.YYY.YYY 1389

where XXX.XXX.XXX.XXX is the remote IP and YYY.YYY.YYY.YYY
is the internal IP of the system rdp is to be permitted to.

Note: if you have an existing access-group against your outside
interface, you will need to merge the access-list entry in to the
appropriate access-list.