Ajay,
I had changed the default RDP port on the local host to port 3400, which explains why I had to leave the static and access-list entries for that port as they were. I have been trying to remote to the local host from an outside network; but, I am still having no luck. I believe that RDP outbound may be blocked on the VPN network at work where I have been trying to remote to the local host.
Would you please just look at the complete configuration of the appliance and let me know whether there are any additional problems and whether the changes I have made are complete.
Anthony
asdm image disk0:/asdm-508.bin
asdm location 10.28.100.22 255.255.255.255 Inside
no asdm history enable
: Saved
:
ASA Version 7.0(8)
!
hostname dcc-asa
domain-name default.domain.invalid
enable password encrypted
passwd encrypted
names
dns-guard
!
interface GigabitEthernet0/0
nameif Outside
security-level 0
no ip address
!
interface GigabitEthernet0/1
nameif Inside
security-level 10
ip address 10.28.100.1 255.255.255.0
!
interface GigabitEthernet0/2
shutdown
no nameif
no security-level
no ip address
!
interface GigabitEthernet0/3
shutdown
no nameif
no security-level
no ip address
!
interface Management0/0
nameif management
security-level 100
ip address 192.168.1.1 255.255.255.0
management-only
!
ftp mode passive
clock timezone EST -5
clock summer-time EDT recurring 1 Sun Apr 2:00 last Sun Oct 2:00
object-group service RDP tcp
port-object range 3389 3410
access-list 101 extended permit ip any any
access-list 101 extended permit tcp any interface Outside eq 3389
access-list 101 extended permit tcp any interface Outside eq 3400
pager lines 24
logging asdm informational
mtu Outside 1500
mtu Inside 1500
mtu management 1500
no failover
monitor-interface Outside
monitor-interface Inside
monitor-interface management
asdm image disk0:/asdm-508.bin
no asdm history enable
arp timeout 14400
nat-control
global (Outside) 1 207.87.60.150
nat (Inside) 1 10.28.100.0 255.255.255.0
static (Inside,Outside) tcp interface 3389 10.28.100.22 3389 netmask 255.255.255.255
static (Inside,Outside) tcp interface 3400 10.28.100.22 3400 netmask 255.255.255.255
access-group 101 in interface Outside
route Outside 0.0.0.0 0.0.0.0 207.87.60.149 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
username admin password tFn1CkZYLaQnGOOs encrypted privilege 15
http server enable
http 10.28.100.0 255.255.255.0 Inside
http 192.168.1.0 255.255.255.0 management
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 10.28.100.70-10.28.100.254 Inside
dhcpd address 192.168.1.2-192.168.1.254 management
dhcpd dns 65.106.1.196 65.106.7.196
dhcpd lease 3600
dhcpd ping_timeout 50
dhcpd enable Inside
dhcpd enable management
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map global_policy
class inspection_default
inspect dns maximum-length 512
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
!
service-policy global_policy global
Cryptochecksum:0df74e4074761a32da84a1c0c8caef42
: end
