cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
491
Views
0
Helpful
2
Replies

Opening ports Cisco ASA version 8.2 (5) 5505

nharripersaud
Level 1
Level 1
I'll need the following ports to be open for incoming traffic to the 3CX.
 
 PBX 3CX WebRTC / UDP 9256-9500
PBX Web Access 5001 / TCP 5001
PBX Media Server (RTP) / UDP 9000-9255
PBX Phone System (SecureSIP) / TCP-UDP 5061
PBX Remote Tunnel 5090 / TCP-UDP 5090
 
the server that is hosting the software for this system ip is 192.168.X.X
 
I am not sure how to configure this, I went and created network object for the host ip but at that point I am at a loss.
 
Any help would be appreciated.
 
Thanks,
 
2 Replies 2

Rahul Govindan
VIP Alumni
VIP Alumni

 For versions 8.2 and before, the configuration is different from the newer releases - no need for an object for NAT. Example for what you are trying to do is here:

 

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113024-asa-82-port-forward-00.html#forwarding

 

static (inside,outside) <protocol> <public-ip> <service/port> <inside-ip> <service/port> netmask 
    255.255.255.255

EX:
static (inside,outside) tcp interface 5001 192.168.x.x 5001 netmask 255.255.255.255

 Follow the same steps for all the ports.

 

Also have an ACL to allow inbound access from outside interface:

 

access-list outside-in extended permit tcp any interface outside eq 5001

nharripersaud
Level 1
Level 1

Thanks for the response, but I think upgrading the ASA to 9+ version will allow me to do ranges. This method would mean I have make a line item for each port.

 

 

Review Cisco Networking for a $25 gift card