cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1802
Views
0
Helpful
13
Replies

Port Forwarding ASA5505

hill.kevin
Level 1
Level 1

I have an ASA5505 configured for Remote VPN connection. I am adding an IP phone server that will allow remote IP phones to connect to the internal phone system. I need to Port Forward port 59002 to an internal IP address. Is there an easy way to do this? Thanks, Kevin

13 Replies 13

andrew.prince
Level 10
Level 10

Kevin,

Is the IP phone software or hardware based?

Andrew,

I believe it is hardware based because I have an actual phone as a remote and a computer inside my network. It is an ESI 50 system.

Thanks,

Kevin

Just add an entry to the acl allowing any remote access to the NAT ip using a desintaiton TCP/UDP port required.

Can you give me the entry for that? I have added a couple of access-list commands and static commands to the configuration. I can see the static entry in the NAT using ASDM showing the port on the outside and the IP on the inside but it still does not work.

francisco_1
Level 7
Level 7

you just need to allow the port on the ACL on your remote user policy group.

see this http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080641a52.shtml

Francisco,

This remote phone does not use the remote VPN connection. I think it just uses our public IP and port. With the port forwarded to the IP of the ESI computer on the inside of the network.

Thanks,

Kevin

dcambron
Level 1
Level 1

Static (INSIDE,OUTSIDE) tcp interface 59002 59002

Access-list permit tcp/udp eq 59002

dcambron
Level 1
Level 1

I just gave you the commands

I see that now thanks! Please forgive me, I am not an IT professional, just a small business owner trying to survive. Can you give me an example of the and the . I know what my public IP is. Thanks!

Static (INSIDE,OUTSIDE) tcp interface 59002 59002

Access-list ACL_OUT permit tcp/udp ANY eq 59002

access-group ACL_OUT in interface OUTSIDE.

If you hace any problem please send me the

show run access-group

show access-list

When I type in the access-list command, I get the error Invalid Hostname with the indication on the "e" of eq.

Success!! I added the word "host" before the public IP and then followed the rest of the commands. The phone works! Thanks!!!!

Very Welcome have a good one

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card