cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
584
Views
0
Helpful
6
Replies

ASA 5505

I would like to have a device on my network accessable from the outside world through ANY port

i have tried using the cmd lines below but with no luck...

access-list outside_access_in extended permit tcp any host 1.2.3.4

access-list outside_access_in extended permit tcp any host 1.2.3.4 eq any

anyone have any ideas?

6 Replies 6

Jon Marshall
Hall of Fame
Hall of Fame

Have you setup Nat for this host ? eg.

static (inside,outside)

Jon

yeah i have

static (inside,outside) 1.2.3.4 10.2.2.35 netmask 255.255.255.255

is the " access-g outside_access_in in interface outside " in place ?

Regards,

Sushil

nope expectially since i have no idea what the access-g is!

an access list is of no use till the time it is applied on an interface.

through " access-group " command we apply an access list on an interface.

PLease add the command from my previous post...should work.

Do rate helpful posts.

Regards,

Sushil

In addition to placing the access-group couple of things you may want to check in the event that you already have access-group outside_access_in in interface outside statement in firewall and still no connection.

1-Make sure the server does not have any firewall of its own enable

2- Make sure the server does indeed listen on ports intended, example lets say port 80 for web, or SSL, telnet, ftp etc..

3- do a telnet test towards the server pub ip from an outside host if you can on the ports the server is listening on.

c:\telnet

look at the logs on asdm see what it tells you while you try connection from the outside.

Rgds

Jorge

Jorge Rodriguez
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card