topic Re: ASA 5505 in Network Security

ASA 5505

Danny Guillory Jr — Mon, 11 Mar 2019 13:57:26 GMT

I would like to have a device on my network accessable from the outside world through ANY port

i have tried using the cmd lines below but with no luck...

access-list outside_access_in extended permit tcp any host 1.2.3.4

access-list outside_access_in extended permit tcp any host 1.2.3.4 eq any

anyone have any ideas?

Re: ASA 5505

Jon Marshall — Tue, 14 Oct 2008 16:33:32 GMT

Have you setup Nat for this host ? eg.

static (inside,outside)

Jon

Re: ASA 5505

Danny Guillory Jr — Tue, 14 Oct 2008 16:35:52 GMT

yeah i have

static (inside,outside) 1.2.3.4 10.2.2.35 netmask 255.255.255.255

Re: ASA 5505

suschoud — Tue, 14 Oct 2008 19:46:06 GMT

is the " access-g outside_access_in in interface outside " in place ?

Regards,

Sushil

Re: ASA 5505

Danny Guillory Jr — Tue, 14 Oct 2008 19:53:53 GMT

nope expectially since i have no idea what the access-g is!

Re: ASA 5505

suschoud — Tue, 14 Oct 2008 20:07:12 GMT

an access list is of no use till the time it is applied on an interface.

through " access-group " command we apply an access list on an interface.

PLease add the command from my previous post...should work.

Do rate helpful posts.

Regards,

Sushil

Re: ASA 5505

JORGE RODRIGUEZ — Tue, 14 Oct 2008 20:18:59 GMT

In addition to placing the access-group couple of things you may want to check in the event that you already have access-group outside_access_in in interface outside statement in firewall and still no connection.

1-Make sure the server does not have any firewall of its own enable

2- Make sure the server does indeed listen on ports intended, example lets say port 80 for web, or SSL, telnet, ftp etc..

3- do a telnet test towards the server pub ip from an outside host if you can on the ports the server is listening on.

c:\telnet

look at the logs on asdm see what it tells you while you try connection from the outside.

Rgds

Jorge