topic Opening Port in ASA in Network Security

Opening Port in ASA

mahesh18 — Tue, 12 Mar 2019 00:12:57 GMT

Hi Everyone,

If i need to open specfic port on ASA so that it allow the traffic for that.

What are different ways to open port using CLI?

Thanks

Mahesh

Julio Carvajal — Tue, 23 Oct 2012 17:40:53 GMT

Hello,

Just to use an ACL and if NAT is required then just configure the right port-forwarding rule or NAT statement.

Regards,

mahesh18 — Tue, 23 Oct 2012 17:49:55 GMT

Hi,

Thanks for reply.

Can you please give generic example config that shows how to open port with or without NAT?

Regards

Mahesh

Julio Carvajal — Tue, 23 Oct 2012 18:00:12 GMT

Hello Mahesh,

Lets say you have an internal host 192.168.12.2 that neeeds to be access on port 80 from the outside world.

We will use the outside interface (public IP) to access it

So configuration on ASA 8.2 will be:

static (inside,outside) tcp 192.168.12.2 80 interface 80

access-list outside_in permit tcp any host interface outside eq 80

access-group outside_in in interface outside

Now lets see it on a scenario where no nat is need it:

We have already an internal server with a public ip address 2.2.2.2 and that one needs to be access on port 80

no nat-control

access-list outside_in permit tcp any host 2.2.2.2 eq 80

access-group outside_in in interface outside

So basically if we already have a routable over the internet IP NAT will not be need it!

Remember to rate all of the answers that help ( if you need assistance on how to rate a post just let me know)

Julio

mahesh18 — Tue, 23 Oct 2012 18:32:36 GMT

Hi Julio,

Thanks again

Regards

Mahesh

Julio Carvajal — Tue, 23 Oct 2012 18:35:33 GMT

Hello,

My pleasure to help

Julio