how to accept traffic from Cisco Router 2921 on Cisco ASA 5510

[ladipol01]

I have a Cisco Router 2921 configure by ISP and pass traffic to my Cisco ASA 5510 how can I configure the ASA 5510 to accept the traffic for my LAN usage.

Thanks in advance for response.

[johnd2310]

Hi,

How is the 2921 passing traffic to the asa? are you using a routing protocol or static routes? are you using nat or not? a basic description of your setup would help.

you will need to configure an outside and an inside interface on the asa. configure routing on the asa to forward traffic to the asa and internal router if present.Configure nat if required.

Thanks

John

[ladipol01]

Hi John,

Thank you for your response.

How is the 2921 passing traffic to the asa?

Answer: This has not been done yet. I want to know how it can be done using CLI

are you using a routing protocol or static routes?

Answer: i am using static routes

are you using nat or not?

Answer: I am using nat

An inside and outside interface has been configure on ASA

configure routing on the asa to forward traffic to the asa and internal router if present.Configure nat if required.

How can this be done using CLI

Regards

Ladipo

[johnd2310]

Hi,

ASA

route outside 0.0.0.0 0.0.0.0 x.x.x.x where x.x.x.x is the ip address of the 2921 interface connected to the asa.

nat configuration will depend on the version of code on the asa, but pat config might look like this:

object network my-inside-net
 subnet y.y.y.0 255.255.255.0
 nat (inside,outside) dynamic interface

thanks

John

[ladipol01]

Hi John

Thank you for the response

I want to use NAT below is the version of the ASA

Cisco Adaptive Security Appliance Software Version 8.2(5)

What code can i use for the NAT

Regards

Ladipo

[johnd2310]

if you are using 8.2(5) then the nat config will be similar to this:

nat (inside) 1 192.168.1.0 255.255.255.0
global (outside) 1 interface

This sample config assumes you are you are using 192.168.1.0 255.255.255.0 as your inside network.

Thanks

John

[ladipol01]

Hi John,

Thank you for the response

I also wan to use port 83 how will i do that in the  code.

Regards

Ladipo

[johnd2310]

I don't understand what you mean with port 83. What do you want to do with port 83?

[ladipol01]

Hi John

That is the port on LAN ip address 192.168.1.25 which is the destination of the traffic coming from the ASA to the LAN.

Regards

Ladipo

[ladipol01]

Hi John,

What i want to do is to port forward port 83 to server ip address 192.168.1.25 on the LAN. The inside ip of ASA is 192.168.1.21 and the outside ip of the ASA is 10.*.*.2 both on subnet 255.255.255.0. The server ip is NAT to 10.253.1.2.

Regards

Ladipo