topic Re: Need to allow inbound connection over TCP 9000 in Network Security

Need to allow inbound connection over TCP 9000

tom.brockman — Mon, 11 Mar 2019 10:59:45 GMT

I am trying to configure an ASA5510 (v7.12) to allow an inbound connection over TCP port 9000. I have a web server on the inside that is listening on port 9000 (http://192.168.1.1:9000)

I have setup a static NAT:

static (inside,outside) 1.2.3.4 192.168.1.1 netmask 255.255.255.255

and the access rule:

access-list outside_in extended permit tcp any host 1.2.3.4 eq 9000

Clients on the inside can reach the web server, but those outside the firewall are getting an unable to connect error.

What am I missing? This should be really straighforward.

Re: Need to allow inbound connection over TCP 9000

sureshkum — Mon, 20 Aug 2007 06:45:44 GMT

Have u grouped the ACL in outside interface.Have u placed the route?

Re: Need to allow inbound connection over TCP 9000

rajatsetia — Mon, 20 Aug 2007 09:44:51 GMT

Hi,

Check what sureshkum has stated ? also try this ...

access-list outside_in extended permit tcp any host 192.168.1.1 eq 9000

Best thing is to check the logs to get clear picture of your peoblem..

logs will tell you if the problem is realted to NAT or access list.

HTH

rgds

Re: Need to allow inbound connection over TCP 9000

purohit_810 — Mon, 20 Aug 2007 11:28:49 GMT

Hi,

Do you have implemented same access-list on OUTSIDE interface?

NAT seems to be fine configured.

Ex:

access-group OUTSIDE_IN in interface outside

Regards,

Dharmesh Purohit

Re: Need to allow inbound connection over TCP 9000

rigoberto.cintron — Mon, 20 Aug 2007 18:07:16 GMT

Check if you used the correct name in ACL.

Example

Your acl:

access-list outside_in extended permit tcp any host 1.2.3.4 eq 9000

Default acl name when you use the ASDM:

access-list outside_access_in extended permit tcp any host 1.2.3.4 eq 9000

Re: Need to allow inbound connection over TCP 9000

tom.brockman — Mon, 20 Aug 2007 18:11:40 GMT

I figured this out. It was an internal routing issue. Thanks for your help.