ASA 5505 port redirection on same public address
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2012 09:28 PM - edited 03-11-2019 04:12 PM
Hi experts,
We have 2 TS (Terminal Servers) and have configured the 1st RDP using my public address (say 8.8.8.8) on port 3389. it is working very well of course. However I need setup my 2nd TS but will use port 7777 on the same public address which is not working.
I am using ASDM 6.3 and firmware 8.3.1.
Is this a limitation for this IOS?
Thanks
- Labels:
-
NGFW Firewalls

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2012 11:18 PM
I assume that your TS is also listening on port 7777? or are you trying to port redirect port 7777 to 3389?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-27-2012 11:49 PM
Hi Jennifer,
yes, I am trying to port redirect port 7777 to 3389 on my 2nd TS. So both TS have port 3389. the 1st TS port is opened with 3389. but would want to conenct to the 2nd TS from outside with port 7777.
thanks

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-28-2012 01:13 AM
can you please run packet tracer on the ASA for traffic destined to port 7777 and share the output. Thanks.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-28-2012 11:52 PM
Hi Jennifer,
the packet tracer is being blocked by NAT
It is not even translating on the NAT:
show nat details:
(inside) to (outside) source static 2nd_TS_address interface service tcp 3389 7777
translate_hits = 0, untranslate_hits = 24
Source - origin: 2nd_TS_address/32, translated: External_IP/32
Service - protocol:tcp Real: 3389 Mapped 7777
It is because I have the 1st TS statically mapped on that same external address? and I'm still trying to statically mapthe 2nd one?
Thanks

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-29-2012 01:05 AM
In theory it should work.
Do you mind upgrading the ASA to the latest version of 8.3?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-30-2012 11:30 PM
Hi jennifer , unfortunately that is not possible. thanks
Anyone have encounter this before?
Thanks
