topic If your "OUTSIDE" interface in Network Security

Cisco 5510

PlaynetworkUK — Tue, 12 Mar 2019 05:42:21 GMT

Interface INSIDE set to 100

Interface OUTSIDE set to 0

Application using port 11024 TCP/UDP is not going out.

Do I need to create a separate NAT statement?

I thought all ports are open going from High to low

Regards

Stan

Hi,As oer the security level

Vibhor Amrodia — Thu, 26 Mar 2015 18:50:24 GMT

Hi,

As oer the security level configured on the ASA device , the traffic should be allowed by default if you don't have any access group configured on the Inside interface.

You can verify the configuration using Packet Tracer:-

https://supportforums.cisco.com/document/29601/troubleshooting-access-problems-using-packet-tracer

Thanks and Regards,

Vibhor Amrodia

If your "OUTSIDE" interface

rizwanr74 — Thu, 26 Mar 2015 19:00:17 GMT

If your "OUTSIDE" interface is facing the Internet, then naturally you need a dynamic-nat in place.

IP address space between Inside to outside is routable, then you need a permit line on the inside ACL, assuming you have an ACL for control access on the inside access.

thanks