topic Re: ASA 5505 Simple Static/ACL Issue in Network Security

ASA 5505 Simple Static/ACL Issue

mattbelmore — Mon, 11 Mar 2019 13:01:11 GMT

Hi all,

We have recently purchased a ASA-5505 device and in trying to get a simple Static IP Mapping (inside to Outside) and access-list configuration, the device does not seem to be allowing pre-approved (ACL) traffic?

Essentially, we have an internal server that I wish to Map to the outside Public Interface for ports 22, 25 and 8080.

I have included a Static (Inside,outside) command along with an ACL applied inbound to the Outside interface. Yet I am unable to connect to the server and the ACL counters do not register any hits.

I have attached a copy of the current config. If anyone can assist or point me in the right direction I would be most grateful..

Matthew Belmore

mbelmore@pnaa.us

Re: ASA 5505 Simple Static/ACL Issue

acomiskey — Wed, 18 Jun 2008 18:06:55 GMT

Change PublicIP-Advent to "interface" in your statics.

static (inside,outside) tcp interface smtp advent.pnaa.us smtp netmask 255.255.255.255

static (inside,outside) tcp interface ssh advent.pnaa.us ssh netmask 255.255.255.255

static (inside,outside) tcp interface 8080 advent.pnaa.us 8080 netmask 255.255.255.255

Re: ASA 5505 Simple Static/ACL Issue

mattbelmore — Wed, 18 Jun 2008 20:20:57 GMT

Thank-you, your suggestion fixed the issue.

Much appreciated!

Matthew Belmore