Opening port on a firewall

[ciscoadminbw]

Hi Guys,

Can someone please verify whether these commands are correct for opening these two ports. The ASA is running version 9.7.

object network app
 host 10.1.1.106

object network app
 nat (inside,outside) static 2.2.23.15

access-list acl-outside extended permit tcp any host 10.1.1.106 eq 443
access-list acl-outside extended permit tcp any host 10.1.1.106 eq 9669

Thanks,

[Seb Rupik]

Hi there,

Looks good. You just need to apply the ACL:

!
access-group acl-outside in interface outside
!

cheers,

Seb.

[ciscoadminbw]

Hi Seb,

The access-group already exists because there are ports already open. Does that mean my commands are complete?

Thanks,

Lake

[Seb Rupik · Accepted solution]

Yes, assuming 2.2.23.15 is routed by the outside interface it should work. Are you seeing a different result?

cheers,

Seb.

[ciscoadminbw]

Thank you very much.