Client Internet access through PIX VPN [7:26530]

Hello, I have two offsite clients. Both connect to our LAN through a PIX 515 via the 3.1.1 client. One client uses DHCP, the other is static. I have split-tunnel enabled on the PIX referencing a separate access-list than my NAT statement. The client using DHCP can access the internet while

PIX subnet access-lists [7:23797]

Does anyone know the access-list command that would allow an entire subnet into an ftp site. Here are some examples of what I've tried: access-list acl_out permit tcp host 212.113.2.0 255.255.255.0 host 124.49.114.6 eq ftp access-list acl_out permit tcp host 212.113.2.0 255.255.255.0 host

Re: PIX subnet access-lists [7:23797]

I think it's access-list acl_out permit tcp 212.113.2.0 255.255.255.0 host 124.49.114.6 eq ftp Is that right? Thanks John John Zei wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... Does anyone know the access-list command that would allow an entire subnet into an

Re: PIX 515 nat or static [7:23286]

I am currently using the static command in order to allow our static internal ips to have static external ips. From what you say I should be using the nat command in place of the static. I do have a nat command in place. For example my nat statement would read nat (inside) 1 192.168.1.0

Re: PIX 515 nat or static [7:23286]

Is there a command nat (inside,outside) 64.23.67.5 192.168.1.4 netmask 255.255.255.255 0 0 ? I guess I thought that when I go from in to out I should use the nat command. I know I need to have the static so others can access the ftp server but am confused about the nat. since I have a static