Solved: Port forwarding help

davidwu2007 · ‎07-29-2008

My ASA 5505 has a static IP address that is connected directly to the internet.

Behind the ASA 5505 is my web server that is connected to the

internal network.

I would like to forward the http traffic that hits ASA 5505 to the internal web Server.

I have configured static PAT as following:

static (inside,outside) tcp interface www 192.168.1.10 www netmask 255.255.255.255

But it is still not working.

Could someone please advise me please!

Thank you!

acomiskey · ‎07-29-2008

You need to add an access list to allow the traffic in.

access-list outside_access_in extended permit tcp any interface outside eq www

access-group outside_access_in in interface outside

View solution in original post

acomiskey · ‎07-29-2008

You need to add an access list to allow the traffic in.

access-list outside_access_in extended permit tcp any interface outside eq www

access-group outside_access_in in interface outside

davidwu2007 · ‎07-30-2008

Thanks,

I did add the ACLs, but I received the following error.

2 Jul 30 2008 11:57:40 106001 12.13.156.xxx xx.22.133.166 Inbound TCP connection denied from 12.13.156.xxx/60807 to xx.22.133.166/80 flags SYN on interface outside

davidwu2007 · ‎07-30-2008

Thank you!

There was a typing error.

Now it's working great!