Telnet from Outside switch to DMZ switch connected to ASA.

[mahesh18]

Hi all,

I have switch b connected to ASA  with fas0/40 under vlan 40.

ASA connection to this switch is under Vlan 3 which is DMZ.

OSPF is running between OSPF and DMZ switch.

I was trying to telnet from Outside interface switch to DMZ  switch which goes through the ASA.

My question is is it possible from Outside Switch to ping the DMZ switch or telnet to it as connection has to pass by ASA ?

Thanks

Mahesh

[Julio Carvajal · Accepted solution]

Hello,

Yes, it is possible.

You just need to allow that traffic over the ASA.

Also if NAT is required then perform a biderectional nat from DMZ to outside,

Regards,

Julio

[mahesh18]

Hi julio,

Currently i am able to telnet from DMZ  switch to Outside Switch through ASA.

But not from outside switch to DMZ  switch.

Right now no Nat is running on ASA.

Outside Switch has route to DMZ  switch by ASA.

Should i allow telnet ACL  on ASA  outside interface to make this work?

Thanks

Mahesh

[Julio Carvajal · Accepted solution]

Hello Mahesh,

Yes, as I said on my previous post

access-list outside_in permit tcp host outside_switch_ip host dmz_switch_ip eq 23

access-group outside_in in interface outside

If you want to check if everything is properly setup for that connection to work across the ASA do the following:

packet-tracer input outside tcp outside_ip_switch 1025 dmz_switch_ip 23

Remember to rate all of the helpful posts

Julio

[mahesh18]

Hi Julio,

It worked great.

Also i ran the packet tracer command before and after the i applied ACL.

After applying ACL  it was all Allow .

Best regards

Mahesh

[Julio Carvajal]

That is great,

Regards