About bene

bene · 03-04-2015

I've been racking my brain lately trying to map one single port on the outside of my ASA: TCP 200, to an internal host TCP 22. I've done this countless times on previous routers and my old PIX, but this ASA is really frustrating me. I've already made...

bene · 03-05-2015

Thanks for the help Jon. I didn't notice that the access-group fell out when I tore out the access-list to correct the port number. All is well.

bene · 03-04-2015

# sh run: Saved:ASA Version 8.3(2) !hostname xxxxxxxdomain-name xxxxxxxxxxenable password xxxxxx encryptedpasswd xxxxxxx encryptednames!interface Vlan1 nameif inside security-level 100 ip address 192.168.7.1 255.255.255.0 !interface Vlan2 nameif outs...

bene · 03-04-2015

# packet-tracer input outside tcp 8.8.8.8 12345 209.x.x.x 200 Phase: 1Type: ACCESS-LISTSubtype: Result: ALLOWConfig:Implicit RuleAdditional Information:MAC Access listPhase: 2Type: UN-NATSubtype: staticResult: ALLOWConfig:object network SSH-SERVER ...

bene · 03-04-2015

I did try all these iterations before posting to no avail. I appreciate the guidance.I've corrected the ACL, saved and reloaded the ASA:access-list outside-access-in extended permit tcp any object SSH-SERVER eq ssh log Still no access. I've verified ...

bene · 03-04-2015

Thank you for the clarification. The example seemed backwards to me too. I have corrected it and I'm still not able to ssh to the host on port 200. The issue I'm assuming is now with my ACL: object network SSH-SERVER host 192.168.7.200object network...

Member Since	‎09-25-2007 09:40 AM
Date Last Visited	‎08-18-2017 03:56 AM
Posts	6

User Statistics

User Activity

ASA 5505 8.3, Port mapping to different internal port number

Thanks for the help Jon. I

# sh run: Saved:ASA Version 8

# packet-tracer input outside

I did try all these

Thank you for the