Syslog to locacl host

[mkkeyan]

Hi MY network setup

ISP terminated in router ---> ASA5510--L3(3560)-L2 -LAN

Objective:

Syslog needs to received from router to local machine,

I have added the route in router, and excluding NAT in ASA. From local machine i am able reach router , but from router unable to reach local machine (or syslog server)

pl help

[Collin Clark]

Can you post the ASA statics and ACL? What do the logs in the ASA state?

[mkkeyan]

no static in ASA

Only acl and nonat acl

access-list internet-access-list permit ip 10.40.50.0 255.255.255.0 host 220.225.XXX.XXX

access-list noant permit ip 10.40.50.0 255.255.255.0 host 220.225.XXX.XXX

internet-access-list -binding inside interface

nonat-access-list with nat 0

thanks

[Collin Clark · Accepted solution]

Relative information is required if you want help. Here's an example.

access-list SYSLOG_SERVER extended permit ip host 10.10.20.17 host [router IP]

static (inside,outside) 10.10.20.17 access-list SYSLOG_SERVER tcp 65535 10000

access-list outside_access_in extended permit udp host [router IP] host 10.10.20.17 eq syslog

In the router you will need a static route to the inside host pointing to your ASA.

ip route 10.10.20.17 255.255.255.255 [ASA public IP]

[mkkeyan]

thank you very much