cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
429
Views
0
Helpful
3
Replies

Port is coded open, but says closed. ASA 5505.

jbornevihc
Level 1
Level 1

I have a Cisco ASA 5505 with a fairly simple set up. Few VPN tunnels and only 3 open ports for applications. I have entered the following lines

static (inside,outside) tcp interface 9002 10.0.3.230 9002 netmask 255.255.255.255

access-list outside_access_in extended permit tcp any interface outside eq 9002

I have done this before with zero issues. The other two ports are open, however, port 9002 will not be visable from the outside. The ASA says it is open, but if I go to a site like canyouseeme, it shows closed. I cannot connect to the application either.

Result: ALLOW

Config:

static (inside,outside) tcp interface 9002 10.0.3.230 9002 netmask 255.255.255.255

  match tcp inside host 10.0.3.230 eq 9002 outside any

    static translation to ***.***.***.***/9002

    translate_hits = 0, untranslate_hits = 111

As you can see, the ASA is getting the hits, just not forwarding it? Any idea?

3 Replies 3

jawad-mukhtar
Level 4
Level 4

Can u check that port is open in your local system.

Jawad

ALIAOF_
Level 6
Level 6

Have you tried to look at the log and/or do a packet capture to see what is happening to the traffic?

Also run wireshark on your local system as well to see what is happening to the traffic.

The port is open on the inside.

Review Cisco Networking for a $25 gift card