I am attempting to configure broadcasting from network segment to another.  This has been working in the past but since we upgrade some technology (from unix to Windows platforms) it is not working. Essentially I want UDP traffic on port 3000 which originates from IP 172.20.1.4/16 to be received by host 192.168.25.107.  Both are connected directly to a 1941 Router. I have attempted many configuration changes, with no luck.  Here is my current configuration: interface GigabitEthernet0/0 ip address 172.20.1.1 255.255.0.0 ip directed-broadcast 103 duplex auto speed auto no cdp enable ! interface GigabitEthernet0/1 ip address 192.168.250.40 255.255.255.0 duplex auto speed auto no cdp enable ! interface GigabitEthernet0/0/0 ip address 192.168.25.1 255.255.255.0 ip access-group 102 in ip helper-address 172.20.1.4 ip directed-broadcast 103 ip accounting output-packets duplex auto speed auto no cdp enable ! interface GigabitEthernet0/1/0 ip address 192.168.102.1 255.255.255.0 ip access-group 109 in duplex auto speed auto no cdp enable ! ip forward-protocol nd ip forward-protocol udp 3000 ! no ip http server no ip http secure-server ! ip route profile ! access-list 101 permit tcp host 10.2.0.97 any eq 3310 access-list 101 permit udp host 10.2.0.97 any eq 3310 access-list 101 permit icmp any any access-list 101 deny ip any any access-list 102 permit udp 192.168.25.0 0.0.0.255 any eq 3000 access-list 102 permit icmp any any access-list 102 deny ip any any access-list 103 permit udp host 172.20.1.4 any eq 3000 access-list 108 permit udp host 192.168.101.10 any eq 3320 access-list 108 permit tcp host 192.168.101.10 any eq 3320 access-list 108 permit icmp any any access-list 108 deny ip any any access-list 109 permit udp host 192.168.102.10 any eq 3320 access-list 109 permit tcp host 192.168.102.10 any eq 3320 access-list 109 permit icmp any any access-list 109 deny ip any any access-list 120 permit ip any any access-list 122 permit udp 192.168.25.0 0.0.0.255 any eq 3000 access-list 122 permit icmp any any access-list 123 permit udp host 172.20.1.4 any eq 3000 access-list 133 permit ip host 172.20.1.4 192.168.25.0 0.0.0.255 no cdp run ! ! ! control-plane ! ! ! ! end Any ideas? ... View more

Hello, I feel that this should be straight forward but I am having a lot of trouble getting this to work. I am using v8.2 (security plus license) and have an ASA which does the standard allow internal access outside but I also have an additional network which is accessed with AnyConnect client. I now have another requirement to place a web service so it is publically accessible.  I only have 1 available IP address which is the outside IP of my ASA (I cannot get anymore).  I though I could achieve this with port forwarding so if I chose to go to my IP with a :portnumber I could forward that traffic to my internal server.  Is this correct. Example: Outside World  ------------- Outside ASA / Inside ASA --------------------- Web Server 0.0.0.0                            1.1.1.1           192.168.1.1                       192.168.1.2 What I would like to do is enter the outside IP of my ASA into a browser with a random port and that redirects to my internal server (e.g. http://1.1.1.1:55000 redirects to https://192.168.1.2 Additional Criteria 1.  I must not affect current services including my VPN connections 2.  I may have additional web servers in future which will have to also use same outside IP address. Can this be done and if so, how? ... View more