Port forwarding once again

Just wanted to add another example of how to set up port forwarding on a cisco asa 5505.

This is how I managed to get it working.

This is an example where the inside network is with netmask The cisco asa has an ip address of

I am doing this by connecting to the ASA with the console cable using the terminal emulator ZOC pro 6.14 from emtec software. bitrate is

9600 8N1.

ciscoasa> ena ciscoasa# conf t

First you set up some NAT rules. This is a rdp rule to a server on the inside net with an ip address of

ciscoasa(config)# static (inside,outside) tcp interface 3389 3389 netmask

Then you can set up a http rule to the same server

ciscoasa(config)# static (inside,outside) tcp interface 80 80 netmask

Ok we now have two rules, to make them work set up some access rules

ciscoasa(config)# access-list outside_access_in extended permit tcp any any eq 3389 ciscoasa(config)# access-list outside_access_in extended permit tcp any any eq http

Then setup the outbound accesslist rule

ciscoasa(config)# access-list inside_nat0_outbound extended permit ip

Then at last set up the exempt NAT rule

ciscoasa(config)# nat (inside) 0 access-list inside_nat0_outbound

Save the configuration

ciscoasa(config)# wr mem

Then do a reload

ciscoasa(config)# reload

I am not saying that this is the correct cisco way to do it, but this is how I got it to work. good luck with your cisco ASA 5505

Dag Kl=E6stad

Reply to
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.