How to allow access through Cisco ASA

Question

Can someone help me with this.We have an ASA doing NAT for our network.  We have a webserver on ournetwork.Lets say the IP address for the wan port on the ASA is206.123.123.123.  When I am on the network, I cant seem to access thewebserver by going to http://206.123.123.123.  If however I am on myhome network and on the internet, I can access the webserver port 80 forwarding rule is in place and works fine.So you see, for some reason, the ASA is blocking me when I am goingout through it and back in.

alexd · Accepted Answer

Yes. That's exactly how the ASA security model works. It's easier to workaround if you use DNS [eg split views in bind].

adepaolis · Answer

This is what I have, I changedaccess-list OutsideISP_access_in extended permit tcp any interfaceOutsideISP eq httpsaccess-list OutsideISP_access_in extended permit tcp any host206.xxx.xxx.xxx eq wwwaccess-list OutsideISP_pnat_inbound extended permit tcp interfaceOutsideISP eq https interface InsideStaff eq httpsstatic (InsideStaff,OutsideISP) tcp interface https 10.55.5.11 httpsnetmask 255.255.255.25510.55.5.11 can be reached from the internet when I go to http://206.xxx.xxx.xxx,however, when I am on the 10.55.5.x local network and try to visithttp://206.123.123.123 it doesn't work.Is there a way to make it work?

Darren Green · Answer

visithttp://206.123.123.123it doesn't work.

Hi,

There were a couple of ways you could do this on the old PIX's, nameley DNS Doctoring (6.2) and the alias commands.

I know the ASA suports DNS Doctoring but am unsure about the alias command.

Just do a search on cisco.com and you shoud find a number of helful articles.

HTH

Regadrs

Darren

cvanoosbree · Answer

why not just modify your *host* file on your windows box your using tobrowse on the internet (within the LAN/WAN of that router) .. egwebserver 10.x.x.xthat way when your in your browser, you just type in webserver and youget in to your site (its a work around, but it does work)

How to allow access through Cisco ASA

Join the Discussion

Didn't find your answer?