topic Xbox live in Network Security

Xbox live

micwill3 — Mon, 11 Mar 2019 21:56:20 GMT

I have an ASA 5501 running latest code. Per the article at http://support.microsoft.com/kb/908874, I need to open the below ports. I have 5 Xboxes (when people come over) and they all have a static IP. My network is 192.168.0.x and is a /24 network.

Xbox LIVE requires the following ports to be open:

Port 88 (UDP)
Port 3074 (UDP and TCP)
Port 53 (UDP and TCP)
Port 80 (TCP)
port 1863 (UDP and TCP) (Kinnect)

I defined the various network ports as a service and then created 5 hosts called xbox1, 2, etc with a static IP.

I dont have access from the command line (forgot telnet and ssh passwords) , so from the gui, what do I do next?

Thanks

Xbox live

Julio Carvajal — Tue, 29 Nov 2011 00:31:48 GMT

Hello Michael,

Do you have ASDM access that you can use to configure the ASA, if not you will need to perform a password recovery and then open those ports.

http://tools.cisco.com/squish/3ec1d

Regards,

Julio

Re: Xbox live

micwill3 — Tue, 29 Nov 2011 02:38:41 GMT

Yes I do have ADSM.

Xbox live

Julio Carvajal — Tue, 29 Nov 2011 17:04:45 GMT

Hello Michael,

So you already have a static one to one translation for those particular xbox units( each one of them has a public ip) right??

Now all you need to do is to create an acl on inbound direction on the outside interface opening the ports you need.

Let me know if this is enough clear.

Regards,

Julio

Re: Xbox live

micwill3 — Tue, 29 Nov 2011 17:06:42 GMT

Sorry, I don’t have a clue on what to do next nor how to do it.

Re: Xbox live

Julio Carvajal — Tue, 29 Nov 2011 17:13:38 GMT

Hello Michael,

Okay I want you to go to the comman-line interface on the ASDM,that its on the Tools tab.

Now I want you to add the following commands:

Show run static ( From this output I will need the ones with the private IP address of the xbox machines)

Show run access-group ( From this I will need you to focus on the one that says access-group xxx in interface outside)

show run access-list xxxx ( Where the xxx is the one from the access-group we disccused before)

Regards,

Julio

Re: Xbox live

micwill3 — Tue, 29 Nov 2011 17:17:11 GMT

OK, thanks for the help. It will be tonight before I can do this as I am remote and don’t allow access from the outside interface.

Re: Xbox live

Julio Carvajal — Tue, 29 Nov 2011 17:23:53 GMT

Hello Michael,

I am more than glad to help,let me know any updates.

Please rate helpful posts!!!

Julio