cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
315
Views
0
Helpful
2
Replies

Cisco 5510

PlaynetworkUK
Level 1
Level 1

Hi

Interface INSIDE set to 100

Interface OUTSIDE set to 0

Application using port 11024 TCP/UDP is not going out.

Do I need to create a separate NAT statement?

I thought all ports are open going from High to low

Regards

Stan

2 Replies 2

Vibhor Amrodia
Cisco Employee
Cisco Employee

Hi,

As oer the security level configured on the ASA device , the traffic should be allowed by default if you don't have any access group configured on the Inside interface.

You can verify the configuration using Packet Tracer:-

https://supportforums.cisco.com/document/29601/troubleshooting-access-problems-using-packet-tracer

Thanks and Regards,

Vibhor Amrodia

rizwanr74
Level 7
Level 7

If your "OUTSIDE" interface is facing the Internet, then naturally you need a dynamic-nat in place.

IP address space between Inside to outside is routable, then you need a permit line on the inside ACL, assuming you have an ACL for control access on the inside access.

 

thanks

 

Review Cisco Networking for a $25 gift card