topic Re: Port Redirection in Network Security

Port Redirection

sgoethals1 — Mon, 11 Mar 2019 10:57:11 GMT

Hi,

I would like to redirect the typical SQL port (1433) on my outside IP address to a specific address on the inside and at the same time, use a different port number. However, I must have something messed up in the config, as I can't make it happen. I chose a random port 7505/7506 on the outside as the port my clients would use to connect to the SQL server on the inside. I am not sure if I am doing this correctly, but would appreciate any help....thanks.

access-list outside_access_in permit tcp any host x.x.x.109 eq 7505

access-list outside_access_in permit tcp any host x.x.x.109 eq 7506

static (outside,inside) tcp 192.168.0.109 1433 x.x.x.109 7505 netmask 255.255.255.255 0 0

static (outside,inside) tcp 192.168.0.109 1434 x.x.x.109 7506 netmask 255.255.255.255 0 0

Re: Port Redirection

srue — Mon, 13 Aug 2007 17:55:50 GMT

static (inside,outside) tcp x.x.x.109 7505 192.168.0.109 1433

static (inside,outside) tcp x.x.x.109 7506 192.168.0.109 1434

Re: Port Redirection

acomiskey — Mon, 13 Aug 2007 18:01:42 GMT

and...

access-list outside_access_in permit tcp any host x.x.x.109 eq 7505

access-list outside_access_in permit tcp any host x.x.x.109 eq 7506

Re: Port Redirection

srue — Mon, 13 Aug 2007 18:07:16 GMT

he already had those.

Re: Port Redirection

acomiskey — Mon, 13 Aug 2007 18:12:59 GMT

I'm aware of that, I wanted to make sure he didn't put...

access-list outside_access_in permit tcp any host x.x.x.109 eq 1433

access-list outside_access_in permit tcp any host x.x.x.109 eq 1434

Re: Port Redirection

sgoethals1 — Mon, 13 Aug 2007 18:33:59 GMT

Ok, let me make sure I understand both replies. I only need to change the static statements that I originally listed with those that were posted. I don't need my originals and the posted ones...right? Since mine said static (outside,inside), and the reply showed static (indide,outside), I just want to make sure that I only needed the correction you folks provided. sorry for my ignorance.

Re: Port Redirection

srue — Mon, 13 Aug 2007 18:35:01 GMT

yes, remove your previous static entries, add the ones I first suggested, and you should be ok.

Re: Port Redirection

sgoethals1 — Mon, 13 Aug 2007 19:04:28 GMT

Works Great! Thanks...one thing I noticed however, is that once I put these settings in, I can no longer ping the external address x.x.x.109 (from the outside). In addition to the STATIC entry redirecting the ports, can I have a standard entry just for translation of other traffic destined to the external address.