cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1106
Views
1
Helpful
15
Replies

ASA port forwarding issue only with https

Chan Thar
Level 1
Level 1

Hello ,

I am experiencing a port forwarding issue.We want a internal server's https web page to expose public access.

The thing is - it is still not sucess.

1. Other ports are working perfect except 443.

2. Tested multiple same internal servers .. only 443 is happening .. Local 443 services are running and tested.

3. Sometimes, really sometimes, I got the https webpage access for a while. No one is making changes at that time.

4. The public ip has no other https service port forwarding . checked all.

5. Port testing with telnet and tcping is showing open.

6.Configuration is fine since it's simple.

7. show Conn , show NAT commands  are showing logs when accessed.

8. NAT, ACL rules are hitting when accessed

9. Internet

Can you someone share me similar cases or helpful troubleshooting ?

ASA 5525 , version 9.8

 

15 Replies 15

Setup a capture on the LAN interface an see if the traffic is actually leaving the ASA interface

cap capLAN interface LAN tcp any host 10.1.103.21 eq 443

show cap

show cap capLAN

If you know the IP of the source you can change any to host aaa.bbb.ccc.ddd

If you do not see any packets being captured change the the capture from tcp to ip (remove eq 443 also) and then test again.

Post the results here

--
Please remember to select a correct answer and rate helpful posts
Review Cisco Networking for a $25 gift card