topic Re: Help on accessing Device from remotely in Network Security

Help on accessing Device from remotely

Davy Ad — Mon, 11 Mar 2019 21:58:35 GMT

Hello All,

I need help on these;

I have a HP Printer (HP Color LaserJet CM2320nf MFP), behind a Cisco ASA5505 Firewall.

I have been accessing this before until last week , I cannot any more. Also i cannot send scan document through it

Here is the Topology />>>>VM Ware-server

| |- - - - ->>>>>IP Phone & PC

===<<Internet>>>==>ASA5505======>ciscoSwitch2960|--------->>>>>IP Phone & PC

|- -- - - - >>>>PC

\->>>>>HP Color LaserJet CM2320nf MFP

* I can access ASA5505 with Https & Cisco Switch with https remotely

* I can Ping all devices behind the firewall & Switch remotely

* Two people in my office with the same subnet 10.10.44.0/24 can ping & HTTPS/http to ASA,Switch & HP printer

* I have VPN Tunnel up & connected to Remote site

Check Attachment for Configurations

Thanks

DaK

Help on accessing Device from remotely

Julio Carvajal — Fri, 02 Dec 2011 23:42:20 GMT

Hello Davy,

In this case the most recommended troubleshooting step would be to do some captures to see whats going on.

I do not know the source and destiantion (printer) ip address, so I will give you a document so you can perdorm the captures and let us know the results.

https://supportforums.cisco.com/docs/DOC-1222

Please rate helpful posts

Julio

Re: Help on accessing Device from remotely

Davy Ad — Mon, 05 Dec 2011 12:05:41 GMT

Hello Jcarvaja,

Thanks for your response , i tried what is in document link you sent, but i could not get any information .

My Source IP address if from Remote site with VPN connection to Destination , Printer's Site.

Source subnet = 10.10.44.0/24 my PC is 10.10.44.23

Destination = 10.10.1.0/24 ( LAN Subnet of the Printer site ) and the Printer IP address is 10.10.1.198

My Cisco ASA is 5505 version 8.4 and these are my commands;

Capture PRINTER-CAPTURE_1 interface inside match tcp host 10.10.44.50 host 10.10.1.198 eq 80

Capture PRINTER-CAPTURE_1 interface inside buffer 1000000 packet 1522 trace trace-count 1000

Capture PRINTER-CAPTURE_1 interface outside buffer 1000000 packet 1522 trace trace-count 1000

and show capture output ;

ASA5505# sh capture PRINTER-CAPTURE_1

62: 14:19:05.576355 802.1Q vlan#1 P0 10.10.44.50.59427 > 10.10.1.198.80: P 2745432908:2745433195(287) ack 45352991 win 16560

63: 14:19:05.576630 802.1Q vlan#1 P0 10.10.1.198.80 > 10.10.44.50.59427: . ack 2745433195 win 7993

64: 14:19:05.576859 802.1Q vlan#1 P0 10.10.1.198.80 > 10.10.44.50.59427: P 45352991:45353080(89) ack 2745433195 win 7993

65: 14:19:05.576920 802.1Q vlan#1 P0 10.10.1.198.80 > 10.10.44.50.59427: FP 45353080:45353080(0) ack 2745433195 win 7993

66: 14:19:05.581680 802.1Q vlan#1 P0 10.10.44.50.59428 > 10.10.1.198.80: . ack 45490856 win 16560

67: 14:19:05.588699 802.1Q vlan#1 P0 10.10.44.50.59428 > 10.10.1.198.80: P 3148480111:3148480396(285) ack 45490856 win 16560

68: 14:19:05.588958 802.1Q vlan#1 P0 10.10.1.198.80 > 10.10.44.50.59428: . ack 3148480396 win 7995

69: 14:19:05.589523 802.1Q vlan#1 P0 10.10.1.198.80 > 10.10.44.50.59428: P 45490856:45491368(512) ack 3148480396 win 7995

70: 14:19:05.590270 802.1Q vlan#1 P0 10.10.1.198.80 > 10.10.44.50.59428: . 45491368:45492748(1380) ack 3148480396 win 7995

71: 14:19:05.590850 802.1Q vlan#1 P0 10.10.1.198.80 > 10.10.44.50.59428: . 45492748:45494128(1380) ack 3148480396 win 7995

72: 14:19:05.632535 802.1Q vlan#1 P0 10.10.44.50.59421 > 10.10.1.1988.80: F 3008331229:3008331229(0) ack 38850175 win 16432

73: 14:19:05.633145 802.1Q vlan#1 P0 10.10.1.198.80 > 10.10.44.50.59421: . 38851555:38852935(1380) ack 3008331230 win 8003

74: 14:19:05.655941 802.1Q vlan#1 P0 10.10.44.50.59427 > 10.10.1.198.80: . ack 45353081 win 16537

75: 14:19:05.656231 802.1Q vlan#1 P0 10.10.44.50.59427 > 10.10.1.198.80: F 2745433195:2745433195(0) ack 45353081 win 16537

76: 14:19:05.656414 802.1Q vlan#1 P0 10.10.1.198.80 > 10.10.44.50..59427: . ack 2745433196 win 7992

77: 14:19:05.665996 802.1Q vlan#1 P0 10.10.44.50.59422 > 10.10.1.198.80: F 1200183666:1200183666(0) ack 39038817 win 16432

Could anyone explaine while packect was drop please ?

====================================

Regards,

DaK

Message was edited by: Davy Ad

Re: Help on accessing Device from remotely

Davy Ad — Mon, 05 Dec 2011 15:41:42 GMT

Dec 5, 2011 7:09 AM (in response to jcarvaja)

Re: Help on accessing Device from remotely