About Konstantopoulos Konstantinos

Konstantopoulos Konstantinos · 12-09-2016

Hello. I have the below problem that I am trying to solve. In an ASA cluster of two 5545-X I am trying to publish an internal server on the Internet by using a different port from the one that the service is listening. In detail I want external user...

Konstantopoulos Konstantinos · 12-30-2016

Same here. CUC subscriber installation 11.5.1.11900-26. I've checked everything after going all the way back power down and then power up again everything worked fine!!!

Konstantopoulos Konstantinos · 12-21-2016

It worked as you've suggested. It was a miss configuration from my side. From what I understand ASA (for inbound packets) first checks if there is any NAT statement that matches and then checks if there is an ACE. While for the outbound is the rever...

Konstantopoulos Konstantinos · 12-21-2016

Here is the abbreviated output of the show access-group access-group out-in in interface OUTSIDE and below is the abbreviated output of the show access-list out-in access-list out-in extended permit tcp any host 172.31.255.4 eq 3389 Thank you.

Konstantopoulos Konstantinos · 12-21-2016

Still doesn't work. The config is currently the below: object network 172.31.255.4 nat (INSIDE,OUTSIDE) static 1.1.1.1 service tcp 3389 65001 access-list out-in line 1 extended permit tcp any host 172.31.255.4 eq 3389 It works only when I have the...

Konstantopoulos Konstantinos · 12-21-2016

I've tested the access list with 3389 as the destination port and left the object NAT statement with same number for real and mapped port (3389) and works. When I change the access list and the object NAT to support 65001 there is no connection.

Member Since	‎10-25-2012 10:59 PM
Date Last Visited
Posts	15

User Statistics

User Activity

ASA cluster port address translation (Port forwarding)

Same here. CUC subscriber

It worked as you've suggested

Here is the abbreviated

Still doesn't work. The

I've tested the access list