cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1818
Views
0
Helpful
10
Replies

Help with Port Forwarding from Outside Address

chuckmccants
Level 1
Level 1

Can someone point me to info on port forwarding from an external address to an internal address. This firewall has a DMZ, but the machine I want to port forward to does not sit in the DMZ. All attempts to solve have lead to my machines in the DMZ not working.

2 Accepted Solutions

Accepted Solutions

Hi,

Be aware that an ACL must allow the traffic comes from Internet to DMZ servers.

Br,

View solution in original post

Ok, have you already checked all ACLs for inside and outside directions?

View solution in original post

10 Replies 10

resoares
Cisco Employee
Cisco Employee

Hi,

Try this command below:

static (inside,outside) tcp 1.1.1.1 www 2.2.2.2 www netmask 255.255.255.255

where 1.1.1.1 = it is your public ip address and 2.2.2.2 it is your internal one ( RFC 1918 ). In this example, the firewall is performing a static PAT for HTTP service. In this case, the reachable ip address for the Internet will be 2.2.2.2

Br,

Sorry, the ip will be 1.1.1.1 to be reachable by Internet

So are you saying:

static (inside,outside) tcp External-IP www Internal-IP www netmask 255.255.255.255

That's correct.

Br

Thanks for the reply, but it didn't work.

Hi,

Be aware that an ACL must allow the traffic comes from Internet to DMZ servers.

Br,

Yes,  realize that. But, this is not a DMZ host, it is one that sits on the inside network.

Ok, have you already checked all ACLs for inside and outside directions?

Got it. I added:

access-list Inside_access_out extended permit tcp any host 192.168.14.252 eq www

access-list Inside_access_out extended permit tcp host 192.168.14.252 eq www any

and everything finally worked.

Thanks again for your help.

Chuck

You are welcome.

Best regards,

Renato Saraiva

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: