topic Re: Port Forwarding ASA5505 in Network Security

Port Forwarding ASA5505

hill.kevin — Mon, 11 Mar 2019 15:47:57 GMT

I have an ASA5505 configured for Remote VPN connection. I am adding an IP phone server that will allow remote IP phones to connect to the internal phone system. I need to Port Forward port 59002 to an internal IP address. Is there an easy way to do this? Thanks, Kevin

Re: Port Forwarding ASA5505

andrew.prince — Thu, 25 Jun 2009 08:43:06 GMT

Kevin,

Is the IP phone software or hardware based?

Re: Port Forwarding ASA5505

francisco_1 — Thu, 25 Jun 2009 09:38:09 GMT

you just need to allow the port on the ACL on your remote user policy group.

see this http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080641a52.shtml

Re: Port Forwarding ASA5505

hill.kevin — Thu, 25 Jun 2009 12:37:35 GMT

Andrew,

I believe it is hardware based because I have an actual phone as a remote and a computer inside my network. It is an ESI 50 system.

Thanks,

Kevin

Re: Port Forwarding ASA5505

hill.kevin — Thu, 25 Jun 2009 12:46:33 GMT

Francisco,

This remote phone does not use the remote VPN connection. I think it just uses our public IP and port. With the port forwarded to the IP of the ESI computer on the inside of the network.

Thanks,

Kevin

Re: Port Forwarding ASA5505

andrew.prince — Thu, 25 Jun 2009 12:47:50 GMT

Just add an entry to the acl allowing any remote access to the NAT ip using a desintaiton TCP/UDP port required.

Re: Port Forwarding ASA5505

dcambron — Thu, 25 Jun 2009 12:53:31 GMT

Static (INSIDE,OUTSIDE) tcp interface 59002 59002

Access-list permit tcp/udp eq 59002

Re: Port Forwarding ASA5505

hill.kevin — Thu, 25 Jun 2009 13:01:00 GMT

Can you give me the entry for that? I have added a couple of access-list commands and static commands to the configuration. I can see the static entry in the NAT using ASDM showing the port on the outside and the IP on the inside but it still does not work.

Re: Port Forwarding ASA5505

dcambron — Thu, 25 Jun 2009 13:02:54 GMT

I just gave you the commands

Re: Port Forwarding ASA5505

hill.kevin — Thu, 25 Jun 2009 13:09:30 GMT

I see that now thanks! Please forgive me, I am not an IT professional, just a small business owner trying to survive. Can you give me an example of the and the . I know what my public IP is. Thanks!

Re: Port Forwarding ASA5505

dcambron — Thu, 25 Jun 2009 13:14:07 GMT

Static (INSIDE,OUTSIDE) tcp interface 59002 59002

Access-list ACL_OUT permit tcp/udp ANY eq 59002

access-group ACL_OUT in interface OUTSIDE.

If you hace any problem please send me the

show run access-group

show access-list

Re: Port Forwarding ASA5505

hill.kevin — Thu, 25 Jun 2009 13:24:23 GMT

When I type in the access-list command, I get the error Invalid Hostname with the indication on the "e" of eq.

Re: Port Forwarding ASA5505

hill.kevin — Thu, 25 Jun 2009 13:54:29 GMT

Success!! I added the word "host" before the public IP and then followed the rest of the commands. The phone works! Thanks!!!!

Re: Port Forwarding ASA5505

dcambron — Thu, 25 Jun 2009 14:00:54 GMT

Very Welcome have a good one