topic ASA port redirection with outside interface in Network Security

ASA port redirection with outside interface

pemasirid — Mon, 01 Nov 2021 03:58:57 GMT

Hi,

I configured port redirection with outside interface as below and allow tcp 4433 on outside interface.

nat (inside,outside) source static <inside-serv> interface service tcp_4433 tcp_4433

I could see packets are arriving on my outside interface with the port 4433 but NO response from internal server to outside. when I did the packet tracer both from outside to inside, i could see that it hits the correct NAT rule. But need to figure out why it still not working (no response from server to client). Appreciate it if someone can shed some light on this issue. thanks.

Re: ASA port redirection with outside interface

balaji.bandi — Fri, 29 Oct 2021 22:59:55 GMT

After NAT do you have ACL to allow in traffic example :

access-list inbound permit tcp any object <inside-serv> eq tcp_4433

Re: ASA port redirection with outside interface

paul driver — Sat, 30 Oct 2021 21:24:29 GMT

Hello

I would agree with @balaji.bandi it possible due to acl restriction and applying that acl to the outside interface:

access-list 100 extended permit tcp any object <xxxx> eq 4433

access-group 100 in interface outside

Re: ASA port redirection with outside interface

Mohammed al Baqari — Mon, 01 Nov 2021 07:12:38 GMT

Hi,

Enable term mon on ASA and initiate again to see what is happening.

**** please remember to rate useful posts