Ports will not open in ASA 5505

[Mike Hinson]

We are trying to open ports 400 and 9799 on a 5505.I added these into the ACL and ran a port test but they still say closed. Do I have to add anything else other than a ACL statement?           

[gauravg2]

Hello Mike

After adding into acl did you apply that acl on the interface?

If yes and still you see the issue then  send the output of packet tracer and also your config

regards

Gaurav

[Rejohn Cuares]

Post your config so we can assist.

Please rate replies and mark question as "answered" if applicable.

[Mike Hinson]

Heres what I have

access-list acl_out extended permit tcp any host 64.53.58.229 eq 9799

access-list acl_out extended permit udp any host 64.53.58.229 eq 9799

access-list acl_out extended permit udp any host 64.53.58.229 eq 400

access-list acl_out extended permit tcp any host 64.53.25.229 eq 9899

access-list acl_out extended permit udp any host 64.53.58.229 eq 9899

access-list acl_out extended permit tcp any host 64.53.58.229 eq 400

[gauravg2]

Hello Mike

The access list looking good.

But did you apply this command

if your public inerface name is outside

access-group acl_out in interface Outside

Also if it still did not work then probably it could be hitting a deny statement.

Can you send the output of this

packet tracer input outside tcp 4.2.2.2 2048  64.53.58.229 400 detailed

regards

Gaurav

[Mike Hinson]

Gaurav,

I havent applied the command. I will try that. Thanks