topic Outside unable to access inside server in Network Security

Outside unable to access inside server

trembler — Mon, 11 Mar 2019 11:50:02 GMT

we have a direct connection to another agency from an interface on our 5520 to their firewall. a user on their side needs access to a server on our inside network. We have an IP ANY ANY access rule for this interface. I've created a static NAT for the server they need to connect to and gave them the NATed address. They tried and said it isn't working. Do I need to add a route for their IP to my inside network? Is there a good way to troubleshoot this issue? I haven't used captures enough to really know how to analyze what I'm seeing.

Re: Outside unable to access inside server

acomiskey — Thu, 17 Jan 2008 21:04:42 GMT

Could you post the relevant parts of the config?

Re: Outside unable to access inside server

trembler — Thu, 17 Jan 2008 22:12:23 GMT

Thanks for looking at this. I'm not sure about the security here (first time here) so I XX'd out the IPs.

I was told the IP's for their PCs are NATed to 192.x.x.x

Interface is UP

IP address 172.x.x.x, subnet mask 255.255.255.0

access-list place line 1 extended permit ip any any (hitcnt=146)

static (inside,place) 172.x.x.x 10.x.x.x netmask 255.255.255.255