topic Re: Open Port 5253 in Network Security

Open Port 5253

wynneitmgr — Wed, 23 Dec 2020 14:00:28 GMT

I am trying to open Port 5253 to permit an outbound connection for our new Kohler Generator. I thought I could do it the same way I was opening other ports but I do not see port 5253 as an option when I am in ASDM with Access and NAT rules. Any ideas? Thank you in advance!!

Re: Open Port 5253

balaji.bandi — Wed, 23 Dec 2020 14:10:59 GMT

You need to create new service object TCP or UDP with port 5253.

Re: Open Port 5253

Rob Ingram — Wed, 23 Dec 2020 14:20:51 GMT

@wynneitmgr You'll need to create and object(s) as it's not a common port. I assume it's TCP, in ASDM just navigate to Configuration > Firewall > Objects > Service Objects and create a service for TCP and UDP (if necessary). You can then modify your ACL as normal and reference this service object.

Re: Open Port 5253

wynneitmgr — Wed, 23 Dec 2020 14:21:16 GMT

@balaji.bandi

Do I need to create an Access Rule or NAT Rule?

Re: Open Port 5253

balaji.bandi — Wed, 23 Dec 2020 14:24:37 GMT

If this was accessing from outside to inside, yes you need NAT rule.

Either case you need Access rule to allow this port from source to destination (by default deny)

Re: Open Port 5253

wynneitmgr — Wed, 23 Dec 2020 14:26:01 GMT

@Rob Ingram

Thanks Rob! What is the command script I need to run in CLI to make sure it saves to the Firewall. Remember I had an issue with settings not being saved previously. Thanks!

Re: Open Port 5253

Rob Ingram — Wed, 23 Dec 2020 14:32:23 GMT

You will only need an ACL rule configured, e.g.

You mentioned this is an outbound connection, so you won't need a specific NAT rule created as you can rely on your existing PAT rule that you should have in place.

If you are in ASDM click the Save button to save the configuration. On from the CLI use the command write mem

HTH