topic Need help with port forwarding in Network Security

Need help with port forwarding

davidwu2007 — Mon, 11 Mar 2019 22:56:31 GMT

Hi All,

Need help configuring the ASA 5510 for port forwarding.

I would like to configure the ASA5510 to open port 12345 and forward the traffic to a machine

behind the ASA, which has a IP address of 192.168.1.2.

Thank you!

David

varrao — Fri, 20 Apr 2012 14:48:30 GMT

What is teh public ip that you have, lets say it is the ASA outside interafce, then:

static (inside,outside) tcp interface 12345 192.168.1.2 12345

and then open the ACL:

access-list outside_access_in permit tcp any interface outside eq 12345

Hope that helps.

Thanks,

Varun

davidwu2007 — Fri, 20 Apr 2012 14:57:14 GMT

Thanks,

Yes, it's the ASA's outside interface.

David

varrao — Fri, 20 Apr 2012 15:02:21 GMT

Then the configuration that i have provided is the correct one, and you can also reference the doc.

Thanks,

Varun

davidwu2007 — Fri, 20 Apr 2012 15:59:20 GMT

Thanks again.

One more question, how do I verify it on the ASA 5510?

David

Julio Carvajal — Fri, 20 Apr 2012 18:42:28 GMT

Hello David,

Varun configuration's is perfect so please mark the question as answered on Varun's reply so future users can learn from your problem.

Now if you want to verifiy the Nat statements you can do a :

Show run static

In order to verifiy is the configuration you placed on your router is the one need it I would recomend you to do a packet-tracer:

packet-tracer input outside tcp 4.2.2.2 1025 interface_ip_address 12345

This will lead you to all the steps the ASA takes to inspect and determine if a packet is secure or not.

Regards,

DO rate all the helpful posts

Julio