Reg: Routing

[George K John]

Hello,

I have an application running on a private IP. The IP address is 192.168.2.208 and port numbers are 18082 and 11909

The client software I have installed in the remote place and this system should get access to the server.  I have a public IP 205.20.18.159

I can add this IP to the client system database configuration file.

IP : 205.20.18.159

Port 8282

The below given entry I have done in my ASA. But client is not able to communicate the server.

static (inside,outside) tcp 205.20.18.159 8282 192.168.2.208 18082 netmask 255.255.255.255

access-list acl_in extended permit tcp host 192.168.2.208 any eq 18082

access-list acl_out extended permit tcp any host 205.20.18.159 eq 8282

access-list acl_in extended permit tcp host 192.168.2.208 any eq 11909

Can someone help me?

Thanks

George

[cadet alain]

Hi,

you should modify the ACLs like this:

no access-list acl_in extended permit tcp host 192.168.2.208 any eq 18082

no access-list acl_in extended permit tcp host 192.168.2.208 any eq 11909

access-list acl_in extended permit tcp any host 205.20.18.59any eq 18082

access-list acl_in extended permit tcp any host 205.20.18.59 any eq 11909

no access-list acl_out extended permit tcp any host 205.20.18.159 eq 8282

apply the acl_in inbound on outside interface.

Regards.

Alain

Don't forget to rate helpful posts.

[George K John]

Thank you for the update.

I have done another setup.

My Jboss and MsSql server are running on 192.168.2.123 server.

MySql Port is 1433

Jboss Http port 18082

and Tcp 11099

my Public IP is  205.20.18.159

Client system is in the remote place and I can configure the TCP and Http port in client settings file.

Please let me know what are the ACL inbound and outboud to configured in the router

Thanks a lot for your help

George

[cadet alain]

Hi,

your new  inbound ACL should be like that:

access-list acl_in extended permit tcp any host 205.20.18.59 any eq 18082

access-list acl_in extended permit tcp any host 205.20.18.59 any eq 11909

access-list acl_in extended permit tcp any host 205.20.18.59 any eq 1433

access-list acl_in extended permit tcp any host 205.20.18.59 any eq 11099

Regards.

Alain

Don't forget to rate helpful posts.

[George K John]

Hello,

Thank you so much for the support.

When I use the ACL it says invalid hostname.

access-list acl_in extended permit tcp any host 205.20.18.59 any eq 18080

                                                              ^

ERROR: % Invalid Hostname

Can you help me?

Thanks

George

[cadet alain]

Hi,

delete your ACL: no access-list acl_in  then in a text editor make the new ACL then copy paste in tour config

Regards.

Alain

Don't forget to rate helpful posts.

[George K John]

Hello,

I used the below ACL and it accepted

access-list acl_in extended permit tcp any host 205.20.18.59 any eq 18080

Still the remote system is saying unable to connect to 205.20.18.59 18080

My doubt is that do we need to create an ACL of http port

access-list acl_in extended permit tcp host 192.168.2.123 any eq http

Any request come to 205.20.18.59 18080 to be forwarded to 192.168.2.123 18080

How do I do this ACL?

Thanks

George

[cadet alain]

Hi,

is the server listening on this TCP port ?

have you got a static PAT entry for this port ?

Regards.

Alain

Don't forget to rate helpful posts.

[George K John]

Hi,

There is no static PAT configured

nat (inside) 0 access-list inside_outbound_nat0_acl

I have done this entry,

I have my other application running in the same network is working with public IP. Only one difference this applicatio is running on many ports like http, tcp  etc....

Thanks

George

[cadet alain]

Hi,

so you changed the network compared to initial post where you had:

static (inside,outside) tcp 205.20.18.159 8282 192.168.2.208 18082 netmask 255.255.255.255

?

Regards.

Alain

Don't forget to rate helpful posts.

[George K John]

Hello,

I have done like this

static (inside,outside) tcp 205.20.18.159 11099 192.168.2.208 11099 netmask 255.255.255.255

static (inside,outside) tcp 205.20.18.159 18080 192.168.2.208 18080 netmask 255.255.255.255

I am able to telnet to 205.20.18.159 18080 but not able to telnet to 11099 port.

Can you please tell me where I am making the mistake? I am not an expert in cisco routing part, I am still a learner.

Thanks

George

[cadet alain]

Hi,

do this:

1) first verify the server at 192.168.2.208 is listening on tcp port 11099

2) if it is the case then do this

  packet-tracer input outside tcp 8.8.8.8 1099 205.20.18.159 11099

  post output

Regards.

Alain

Don't forget to rate helpful posts.

[George K John]

Hello,

Intranet it is working fine. When I  use the public IP it is not working

Thanks

George

[cadet alain]

Hi,

ok so post the output of the packet-tracer command i asked for.

Regards.

Alain

Don't forget to rate helpful posts.

[George K John]

Hello,

I rectified the problem, now it is working.

Thanks a lot for your suggestion and time

George