cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1024
Views
0
Helpful
5
Replies

How to forward hit request on 5555 port to 80 port

prashantrecon
Level 1
Level 1

HI,

I have one server 172.16.0.100 and i nat this server to a public ip X.X.X.5 and i open RDP for this public ip.

Now when i access Remote desktop on this public ip x.x.x.5 it open perfectly.

Now my senario is that i want to open a http url on port 5555,server ADMIN open port 80 for this URL on LOCAL lan(http://172.16.0.100:80)

So how can i map port 5555 to port 80 on ASA 5520.

so when i hit URL

http://x.x.x.5:5555 it should redirect to http://172.16.0.100:80

Regards,

Prashant

1 Accepted Solution

Accepted Solutions

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Prashant,

What  version are you running??

lets say its 8.2:

static (inside,outside)  tcp x.x.x.x.x 5555 172.16.0.100 80

access-list outside_in permit tcp any host xx.x.x.x.x eq 5555

Let me know if this is what you are looking for.

Please rate helpful comments,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

5 Replies 5

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Prashant,

What  version are you running??

lets say its 8.2:

static (inside,outside)  tcp x.x.x.x.x 5555 172.16.0.100 80

access-list outside_in permit tcp any host xx.x.x.x.x eq 5555

Let me know if this is what you are looking for.

Please rate helpful comments,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi,

I have a similar issue related to ASA ios 7.2. The current config has static one to one mapping and Accesslist allowing service group including 80,53,443,21,25,110 ports allowd from outside.

How can I change the config to the one stated similar to above on ASDM.

Suppose, I want tcp 10.1.1.1:25 mapped to 115.1.1.1:550. 

Hello Sangram,

I think I do not understand your question, if you are just trying to nat that it would be:

static(inside,outside) tcp 115.1.1.1 550 10.1.1.1 25

access-list outside_in permit tcp any host 115.1.1.1 eq 550

access-group outside_in in interface outside

Let me know if this is what you are looking for.

Please rate helpful posts,

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi,

Its working on 8.2 .

But some time i have to restart server to open telnet on 5555 port

static (inside,outside) tcp x.x.x.x 5555 172.16.0.x 23

access-list outside_in permit tcp any host x.x.x.x eq 5555

what could be the issue..

is it related to server ?

when i unable to telnet on

at that time i was able to do telnet on ip 172.16.0.x on port 23 using putty.

Regards,

Prashant

Hello Prashant,

If you have to restart the server in order to do telnet seems like got to be with the server configuration, next time before restarting the server try to do a clear local-host x.x.x.x.x.

To be completely sure about if its a server issue you could do a capture next time this happens in order to see if the server is responding to the clients request.

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card