Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Port forwarding help

My ASA 5505 has a static IP address that is connected directly to the internet.

Behind the ASA 5505 is my web server that is connected to the

internal network.

I would like to forward the http traffic that hits ASA 5505 to the internal web Server.

I have configured static PAT as following:

static (inside,outside) tcp interface www 192.168.1.10 www netmask 255.255.255.255

But it is still not working.

Could someone please advise me please!

Thank you!

1 ACCEPTED SOLUTION

Accepted Solutions
Green

Re: Port forwarding help

You need to add an access list to allow the traffic in.

access-list outside_access_in extended permit tcp any interface outside eq www

access-group outside_access_in in interface outside

3 REPLIES
Green

Re: Port forwarding help

You need to add an access list to allow the traffic in.

access-list outside_access_in extended permit tcp any interface outside eq www

access-group outside_access_in in interface outside

New Member

Re: Port forwarding help

Thanks,

I did add the ACLs, but I received the following error.

2 Jul 30 2008 11:57:40 106001 12.13.156.xxx xx.22.133.166 Inbound TCP connection denied from 12.13.156.xxx/60807 to xx.22.133.166/80 flags SYN on interface outside

New Member

Re: Port forwarding help

Thank you!

There was a typing error.

Now it's working great!

286
Views
0
Helpful
3
Replies
CreatePlease login to create content