I’m trying to finish a ASA install in our office and am having some difficulty getting my Web Server in the DMZ available to the outside world.
The web server is listening on Port 8888, and can be reached from a computer on the inside network, but not from the outside. If I config the web server to listen and the ASA to connect via port 80 all clients work was expected (both connecting from the inside and connecting from the outside) So I can make it work, and fail… But not work the way I need it to.
Attached is a (what should be a cleaned up) config of both the working and non-working configs, and pdf showing physical traffic flow.
When in the non-working config, I’m able to capture an error on the ASA when a machine on the outside try’s to connect. Same repeating error. Any help would be greatly appreciated..
——————
Goal:
- Connect to web server on port 8888 in DMZ from both inside and from outside (customer access) networks.
Data flow Required from Inside pc:
- client pc web browser port 80 -> 3560 SW -> 2911 router -> asa 5505 -> DMZ -> Web Sever port 8888 -> Back to client
Data flow Required from Outside pc:
- client pc web browser port 80 -> asa 5505 -> DMZ -> Web Sever port 8888 -> Back to client
ASA Log Error:
3|Oct 03 2017|14:51:31|710003|<Client IPAddress>|23397|< aaa.bbb.ccc.ddd >|80|TCP access denied by ACL from <Client IPAddress>/23397 to outside:< aaa.bbb.ccc.ddd >
thank you
