Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

5505ASA and Counterstrike

hello,

i run a game server and currenly client cannot connect. i can connect to the internet and the game server connects to the internet game managers, clients cannot connect to me. below is the running config, as you can see i have attempted to open the ports several times/ ways? still nothing! when i probe these ports with and outside tool, it is shown as 'stealth', i should have full opening here!

here is the config, please help me!

Saved

:

ASA Version 7.2(2)

!

hostname CISCO-ASA

domain-name DAVIDUMMEL.COM

enable password BQ3AMEy1YDiWi3f7 encrypted

names

!

interface Vlan1

nameif inside

security-level 100

ip address 192.168.1.1 255.255.255.0

!

interface Vlan2

nameif outside

security-level 0

pppoe client vpdn group verizon

ip address pppoe setroute

!

interface Vlan3

shutdown

no forward interface Vlan1

nameif dmz

security-level 50

no ip address

!

interface Ethernet0/0

switchport access vlan 2

!

interface Ethernet0/1

!

interface Ethernet0/2

!

interface Ethernet0/3

!

interface Ethernet0/4

!

interface Ethernet0/5

!

interface Ethernet0/6

!

interface Ethernet0/7

!

passwd 2KFQnbNIdI.2KYOU encrypted

ftp mode passive

dns server-group DefaultDNS

domain-name DAVIDUMMEL.COM

same-security-traffic permit inter-interface

same-security-traffic permit intra-interface

object-group service STEAM_SERVER tcp-udp

description this is for connectivity to steam server

port-object range 27005 27050

access-list outside_access_in extended permit tcp any host 192.168.1.5 range 27005 27050

access-list outside_access_in extended permit udp any host 192.168.1.5 range 27005 27050

access-list outside_access_in extended permit tcp interface outside 192.168.1.0 255.255.255.0 range 27005 27050

access-list outside_access_in extended permit udp interface outside 192.168.1.0 255.255.255.0 range 27005 27050

access-list outside_access_in extended permit tcp any any range 27005 27050

access-list outside_access_in extended permit udp any any range 27005 27050

access-list inside_access_out extended permit tcp host 192.168.1.5 any range 27005 27050

access-list inside_access_out extended permit udp host 192.168.1.5 any range 27005 27050

access-list inside_access_out extended permit tcp 192.168.1.0 255.255.255.0 interface outside range 27005 27050

access-list inside_access_out extended permit udp 192.168.1.0 255.255.255.0 interface outside range 27005 27050

pager lines 24

logging enable

logging asdm informational

mtu inside 1500

mtu outside 1500

mtu dmz 1500

icmp unreachable rate-limit 1 burst-size 1

asdm image disk0:/asdm-522.bin

no asdm history enable

arp timeout 14400

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

access-group inside_access_out out interface inside

access-group outside_access_in in interface outside

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout uauth 0:05:00 absolute

http server enable

http 192.168.1.0 255.255.255.0 inside

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp authentication linkup linkdown coldstart

telnet timeout 5

ssh timeout 5

console timeout 0

vpdn group verizon request dialout pppoe

vpdn group verizon localname 1

vpdn group verizon ppp authentication pap

vpdn username 1 password ********* store-local

dhcpd auto_config outside

!

dhcpd address 192.168.1.100-192.168.1.200 inside

dhcpd enable inside

!

!

class-map inspection_default

match default-inspection-traffic

!

!

i had to remove stuff for it to fit here

2 REPLIES
New Member

Re: 5505ASA and Counterstrike

does this shed any light?

log entries...

6 Jan 28 2007 19:37:18 302016 69.28.151.162 192.168.1.5 Teardown UDP connection 1696 for outside:69.28.151.162/27011 to inside:192.168.1.5/27015 duration 0:02:01 bytes 183

6 Jan 28 2007 19:35:45 302015 68.142.64.165 192.168.1.5 Built outbound UDP connection 1699 for outside:68.142.64.165/27014 (68.142.64.165/27014) to inside:192.168.1.5/26900 (71.177.125.89/1160)

6 Jan 28 2007 19:35:47 302014 65.193.119.140 192.168.1.3 Teardown TCP connection 1690 for outside:65.193.119.140/80 to inside:192.168.1.3/2459 duration 0:01:05 bytes 3216 TCP FINs

Re: 5505ASA and Counterstrike

Counter-Strike (at least the 1.6 version) works

on port 27015/udp, dude.

120
Views
0
Helpful
2
Replies
CreatePlease to create content