🚀 go-pugleaf

In article <Xns93C2CB80F3AF9wdjohnstoncomcastnet@206.127.4.25>,
Bill Johnston  <wdj-netconsult@consultant.com> wrote:
:My ignorance on the meaning of the number in router ACLs 
:could stem from the fact that I spent more time diddling 
:my clients' PIX boxes, on which port blocking and port 
:redirection (PAT) is a major concern.  To be sure, this
:use of port numbers typically occurs in the "conduit" 
:command lines, but those are ones that often get the 
:most work and rework as a new firewall is set up.

I would interpret that paragraph as indicating that you
do not do any IPSec work, and that you are working primarily
on old PIX boxes -- probably PIX 4.2 boxes that haven't been upgraded
much past 5.2.

If you were working with IPSec, then you would very likely have run
into issues of getting IPSec working through a filter or firewall,
which would have led you to references to AH, ESP, or GRE, and you
would likely have encountered the numeric protocol specification
syntax.

If you were working with newer PIXes from scratch or PIXes that
were being kept up to date into the 6.x era, you would be using
ACLs instead of conduits. Also, 6.x especially tends to work with
port names instead of port numbers [but accepts numbers still].


My inference would be that your PIX skills are not really up to date.
If you can afford it, I would suggest that you invest in a PIX 501
for learning purposes. [Someone suggested recently that the 501E will be
out soon; I don't know anything about that.]
-- 
   Look out, there are llamas!