Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Is my traffic reaching the firewall?

Hi Guys,

I'm new to the ASA and I'm currently working with a 5510 (7.0.6). I'm trying to allow users from the "inside" interface access to a specific host (HOSTA) on a specific port (PORTA) via the "outside" interface. It is not working, and I am not suer how to troubleshoot.

Here's the setup:

PAT is configured for all users on the "inside" to obtain a single routable IP (1.1.1.1). An access list has been created and applied to the inside interface to allow connection to HOSTA via PORTA for all users.

Here's my config:

global (outside) 1 1.1.1.1

nat (inside) 1 0.0.0.0 0.0.0.0

access-list inside extended permit tcp any host HOSTA eq PORTA

access-group inside in interface inside

Now, during troubleshooting, I do not see my internal address in the NAT table (using "show xlate"). Also I do not see any packet count in the access list (using show access-list)

I'm open to suggestions here really, as I'm completely stumped. Assume routing is fine and there are no other firewalls blocking traffic.

Can anyone help me?


Rgds

Scott

2 REPLIES
New Member

Re: Is my traffic reaching the firewall?

Is anyone able to tell me how to view the session table on an ASA 5510 (7.0.6)? That would be a good start.

New Member

Re: Is my traffic reaching the firewall?

Hi All,

Apologies, but I figured this one out. Looks like there was an ACE further up the chain affecting my connection.

Rgds

Scott

147
Views
0
Helpful
2
Replies