Forwarding ports to an inside IP address?

Answered Question
Jun 2nd, 2010

I need to forward several ports to an inside IP address for video conferencing.  what is the sommnds to accomplish this? I have a Cisco ASA 5510 ver 8.0(4)23.  I need to forward both TCP and UDP ports.

thanks

I have this problem too.
0 votes
Correct Answer by Federico Coto F... about 6 years 6 months ago

Paul,

''I need to forward port 1720 TCP to my inside ip address of 5.5.5.5 for example.  Then I need to forward tcp ports 60,000 and 60,1001 to inside ip of 5.5.5.5''

static (inside,outside) tcp PUBLIC_IP 1720 5.5.5.5 1720

static (inside,outside) tcp PUBLIC_IP 60000 5.5.5.5 60000

static (inside,outside) tcp PUBLIC_IP 61001 5.5.5.5 61001

The above commands will accomplish just that. (just need to change PUBLIC_IP with the correct public IP)

Federico.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Federico Coto F... Wed, 06/02/2010 - 10:50

Hi Paul,

The command on the Firewall to do port forwarding is this:

static (inside,outside) tcp 200.1.1.1 80 10.1.1.1 80

The above command redirects incoming HTTP traffic on IP 200.1.1.1 to internal server 10.1.1.1

So, just follow the above command for every TCP port and change the protocol to UDP when needed.

Federico.

paul.houston Wed, 06/02/2010 - 10:55

Thank you Federico.  But let's say a specific port.

I need to forward port 1720 TCP to my inside ip address of 5.5.5.5 for example.  Then I need to forward tcp ports 60,000 and 60,1001 to inside ip of 5.5.5.5

Where in your static line would i be call out the specific ports mentioned above?

Paul

Correct Answer
Federico Coto F... Wed, 06/02/2010 - 11:00

Paul,

''I need to forward port 1720 TCP to my inside ip address of 5.5.5.5 for example.  Then I need to forward tcp ports 60,000 and 60,1001 to inside ip of 5.5.5.5''

static (inside,outside) tcp PUBLIC_IP 1720 5.5.5.5 1720

static (inside,outside) tcp PUBLIC_IP 60000 5.5.5.5 60000

static (inside,outside) tcp PUBLIC_IP 61001 5.5.5.5 61001

The above commands will accomplish just that. (just need to change PUBLIC_IP with the correct public IP)

Federico.

Actions

This Discussion