Solved: Port Forwarding Outside Interface

chevymannie · ‎12-30-2016

Wanted to make sure I had my syntax right for this. I'm trying to forward a port say 8030 from my outside interface to a host on the inside on 3389.

Here's what I have so far

object network 1.1.1.1

host 1.1.1.1

nat (inside,outside) static interface service tcp 3389 8030

access-list outside_in extended permit tcp any host 1.1.1.1 eq 8030

Trying to get this to work and I'm not seeing any hits on my outside ACL.

Karsten Iwen · ‎12-30-2016

1.1.1.1 is your internal IP in this scenario?
In the ACL you have to use the real port, same as you use the real IP (1.1.1.1):

access-list outside_in extended permit tcp any host 1.1.1.1 eq 3389