can't access wifi router behind firewall

[ranasaadnoori]

hi,

I have a wifi router behind firewall, i am trying to reach wifi web management from firewall outside interface but its not responding any idea i am not expert on asa appliances ( asa5520)

i tried access list on outside interface

wifi wan management is enabled on ip 192.168.150.9 port 80 

i used access list settings on asa5520 as follows:

access list wifi-out extended permit tcp any host 192.168.150.9 eq 80

access-group wifi-out in interface outside

[balaji.bandi]

what is the source IP coming from ?

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/firewall/asa-96-firewall-config/access-acls.html

[ranasaadnoori]

The source ip is network address 192.168.200.6 behind a router and i do have routes to 192.168.150.0 network.

[Georg Pauwen]

Hello,

can 192.168.150.9 ping 192.168.200.6 ? Do you have any NAT configured ?

---

[balaji.bandi]

hostname(config)# object network server1
hostname(config-network-object)# host 192.168.150.9
hostname(config-network-object)# nat (inside,outside) static interface service tcp 80 80

hostname(config)# access-list OUTSIDE extended permit tcp any object server1 eq 80

from above document share modilfied to fit your needs.

[ranasaadnoori]

i did actually try the port nat but didnt work , i think its because i have another nat on outside interface on port 1009 port for printer 

[paul driver]

Hello

I assume the ASA is perfroming NAT, try the following:

object network Wifi_http
host 192.168.150.9
nat (inside,outside) static interface service tcp www www
access-list 100 extended permit tcp any object Wifi_http eq www

[ranasaadnoori]

do have nat, as explained above for balaji.banadi

[Georg Pauwen]

Hello,

post the full running configuration of your ASA (sh run)...