Thursday, March 25, 2010

Cisco PIX - Object group

SAMPLE

object-group service YM tcp-udp
description Yahoo Messenger
port-object range 8001 8002
port-object eq 5050
port-object eq 23
port-object eq 20
port-object eq 119
port-object eq 25



object-group service RemoteTCP tcp
port-object eq 5900
port-object eq 3389
port-object eq 5800

RTMP

object-group service RTMP tcp
description RTMP requested by Smartcard 03232010
port-object eq 1935
port-object eq 8088
port-object eq 843
port-object eq 5080


access-list outside line 62 extended permit tcp any host 219.93.13.x object-group RTMP
access-list outside line 63 extended permit tcp host 60.52.142.241 host 219.93.13.x eq 5900

refer : http://www.cisco.com/en/US/docs/security/pix/pix62/command/reference/mr.html#wp1095114

No comments:

Post a Comment