cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
579
Views
0
Helpful
3
Replies

Port forwarding help

davidwu2007
Level 1
Level 1

My ASA 5505 has a static IP address that is connected directly to the internet.

Behind the ASA 5505 is my web server that is connected to the

internal network.

I would like to forward the http traffic that hits ASA 5505 to the internal web Server.

I have configured static PAT as following:

static (inside,outside) tcp interface www 192.168.1.10 www netmask 255.255.255.255

But it is still not working.

Could someone please advise me please!

Thank you!

1 Accepted Solution

Accepted Solutions

acomiskey
Level 10
Level 10

You need to add an access list to allow the traffic in.

access-list outside_access_in extended permit tcp any interface outside eq www

access-group outside_access_in in interface outside

View solution in original post

3 Replies 3

acomiskey
Level 10
Level 10

You need to add an access list to allow the traffic in.

access-list outside_access_in extended permit tcp any interface outside eq www

access-group outside_access_in in interface outside

Thanks,

I did add the ACLs, but I received the following error.

2 Jul 30 2008 11:57:40 106001 12.13.156.xxx xx.22.133.166 Inbound TCP connection denied from 12.13.156.xxx/60807 to xx.22.133.166/80 flags SYN on interface outside

Thank you!

There was a typing error.

Now it's working great!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: