To customize the port of Defense center

[diwakar410]

I have cisco ASA and the Defense center is managed in the VM. I have enable the ASA for remote access and by using https://x.x.x.x i get access to the ASA. My DC is running on the local network inside interface and the IP is 192.168.1.15. Is it even possible to port forward and have the access of DC from the remote office. I think we could have got the access of DC using https had there been no ASA  by forwarding but now with  https://x.x.x.x i get the access of ASA, what can be done to get the access of DC. Is there a way to customize ports?

[ankojha · Accepted solution]

Hi,

You can configure static nat on the ASA with port forwarding enabled 

for example 

 if your ASA public ip is 1.1.1.1 and defence center private ip is 2.2.2.2 then configuration will be auto nat with below syntax:

object network 1.1.1.1-DCaccess

host 2.2.2.2

nat(inside,outside) static 1.1.1.1 service tcp 443 8443

here 1.1.1.1 is the object name for the public up of asa

after this you can access DC on 

https://1.1.1.1:8443

Rate if it helps

thanks,

Ankita

[diwakar410]

Thank you Ankita. I will try that solution of yours. But what about the access rule:

Will this command work:

"access-list any-name extended permit tcp any hostname 2.2.2.2 eq 8443"  

???

Because i tried forwarding the port 443 and it didn't let me forward that port. 

[Rishabh Seth]

Hi,

The acl should permit real port and IP address. So ensure the real IP and port of DC are permitted in the acl.

Hope it helps.

RS

Rate if it helps.