Solved: Port Redirection

sgoethals1 · ‎08-13-2007

Hi,

I would like to redirect the typical SQL port (1433) on my outside IP address to a specific address on the inside and at the same time, use a different port number. However, I must have something messed up in the config, as I can't make it happen. I chose a random port 7505/7506 on the outside as the port my clients would use to connect to the SQL server on the inside. I am not sure if I am doing this correctly, but would appreciate any help....thanks.

access-list outside_access_in permit tcp any host x.x.x.109 eq 7505

access-list outside_access_in permit tcp any host x.x.x.109 eq 7506

static (outside,inside) tcp 192.168.0.109 1433 x.x.x.109 7505 netmask 255.255.255.255 0 0

static (outside,inside) tcp 192.168.0.109 1434 x.x.x.109 7506 netmask 255.255.255.255 0 0

srue · ‎08-13-2007

yes, remove your previous static entries, add the ones I first suggested, and you should be ok.

View solution in original post

srue · ‎08-13-2007

static (inside,outside) tcp x.x.x.109 7505 192.168.0.109 1433

static (inside,outside) tcp x.x.x.109 7506 192.168.0.109 1434

acomiskey · ‎08-13-2007

and...

access-list outside_access_in permit tcp any host x.x.x.109 eq 7505

access-list outside_access_in permit tcp any host x.x.x.109 eq 7506

srue · ‎08-13-2007

he already had those.

acomiskey · ‎08-13-2007

I'm aware of that, I wanted to make sure he didn't put...

access-list outside_access_in permit tcp any host x.x.x.109 eq 1433

access-list outside_access_in permit tcp any host x.x.x.109 eq 1434

sgoethals1 · ‎08-13-2007

Ok, let me make sure I understand both replies. I only need to change the static statements that I originally listed with those that were posted. I don't need my originals and the posted ones...right? Since mine said static (outside,inside), and the reply showed static (indide,outside), I just want to make sure that I only needed the correction you folks provided. sorry for my ignorance.

srue · ‎08-13-2007

yes, remove your previous static entries, add the ones I first suggested, and you should be ok.

sgoethals1 · ‎08-13-2007

Works Great! Thanks...one thing I noticed however, is that once I put these settings in, I can no longer ping the external address x.x.x.109 (from the outside). In addition to the STATIC entry redirecting the ports, can I have a standard entry just for translation of other traffic destined to the external address.