How to configure access list for OUTBOUND rule on specified ports

[bashiru.bayonle]

Hello all,

Please i have configured a host behind VPN on ASA Version 9.1(2) and am having a challenge on how to configure OUTBOUND access list from my host to the host on the other site on port 8086 and 8009.

Kindly help asap.

[Rahul Govindan]

You best option is to configure an inbound ACL on the interface on which the host is connected. So say it is connected on the inside interface and it has an existing ACL called inside-in, the entry you would need to add would be:

access-list inside-in permit tcp host <your host> host <remote host> eq 8086

This would be outbound with respect to your host but blocked before the ASA can process it further.

[Rahul Govindan]

You best option is to configure an inbound ACL on the interface on which the host is connected. So say it is connected on the inside interface and it has an existing ACL called inside-in, the entry you would need to add would be:

access-list inside-in permit tcp host <your host> host <remote host> eq 8086

This would be outbound with respect to your host but blocked before the ASA can process it further.