Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CCP - Advanced Firewall Creating Custom Ports Inbound Traffic

Hey folks, i require some assistance with my ISR 800 series router zone based Firewall configuration.

The router is currently setup and routing traffic to the internet successfully.

I would like to setup a custom inbound port(TCP-3389) accessible from the internet.

Port destination termination will be an internal PC at say 192.168.1.50.

How can i accomplish this using CCP or console.

I  already have defined the port using Application Mapping in CPP. however  the firewall is recording the following syslog message:

%FW-6-DROP_PKT:  Dropping udp session 24.76.164.168:13925 192.168.1.50:3389  on  zone-pair ccp-zp-out-zone-To-in-zone class class-default due to DROP  action  found in policy-map with ip ident 0

Any assistance is greatly appreciated.

If full config is required  to assist please let me know.

Thanks.

1 REPLY
Hall of Fame Super Silver

CCP - Advanced Firewall Creating Custom Ports Inbound Traffic

465
Views
0
Helpful
1
Replies