Cisco Firewall :: 5505 - Opening Ports On DHCP Outside ASA Interface

Feb 25, 2011

I am used to setting up access-lists on outside interfaces with ip addresses that are static. I have recently been given a site that is using a client for name to ip address resolution on an outside interface that is dhcp assigned. I created an access-list to open up ports 41794 and 41795 to an engineering application but everytime I try to connect from the outside I get a syn timeout. The application works when inside the lan. Basically I want to allow outside connections from anywhere on the outside to go to ports 41794 and 41795. I am running a Cisco ASA 5505 on version 7.2(4) Below is my conifg. what I may have misconfigured?
: Saved:ASA Version 7.2(4)!names!interface Vlan1 nameif inside security-level 100 ip address!interface Vlan2 nameif outside security-level 0 ip address dhcp setroute!interface Ethernet0/0 switchport access vlan 2!interface


View 5 Replies


Cisco Firewall :: Opening Ports On 5505?

Jan 2, 2013

I am trying to configure a new 5505 but I am having difficulties opening ports that allow traffic in from the outside. My setup is Comcast Business Modem (w/ single static IP) -> ASA ( -> (dumb) Switch -> NAS ( I am attemping to open port 5001 to the NAS. I am very new to IOS so I have mostly been working in ASDM. Not sure if I am overcomplicating this for myself or what but I am stuck.
My running config is -
ASA Version 8.2(5)
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted


View 4 Replies View Related

Cisco Firewall :: 5505 - Opening TCP Ports In ASDM Launcher

Jun 20, 2011

I am trying to open up 3 TCP ports in Cisco ASDM Launcher:
And have a Cisco ASA 5505 Router.  I need these ports open in order for a software that I have installed on the server to communicate with my local client computers for my business,  The software is installed on Windows 2008 Server Standard Edition and was installed with MicrosoftSQL 2005.  The software and Microsft SQL 2005 is pretty much installed and just requires this last step in order for the server to be connected to the local  computers.  In order to resolve this, I have gone to.

View 1 Replies View Related

Cisco Firewall :: 5505 - Show Current IP Address Of Interface (dhcp)

May 8, 2012

Is there any way of showing the currently assigned ip address for an interface configured to use DHCP on an ASA 5505?

View 2 Replies View Related

Cisco Firewall :: Configure DHCP Server On Inside Interface ASA 5505

May 9, 2012

We've just started with the ASA 5505. We do run a DHCP server on the inside interface, so it is in the same VLAN 1 as all of the clients. However, we cannot get it to work.We can't use DHCP Relay, as the ASA 5505 only allows to relay to DHCP servers in a different subnet.Or do we have to move the DHCP server to a different subnet. If so, how would we configure that scenario?

View 13 Replies View Related

Cisco :: Opening Ports On Firewall?

Apr 24, 2012

We have a DVR here at work that has a web interface on port 100. From our internal network we just use http: What is the best way to set that up on cisco 5510 firewall. I have cisco asdm and set a access rule: enabled=checked ; source=any ; destination= ; service= tcp 100 ; action=permit. It shows a couple of hits when I go to [URL]

View 7 Replies View Related

Cisco Firewall :: Opening Outbound Ports On ASA5505

Oct 2, 2012

I need to open some outbound ports in order for our CCTV company to receive alarms from our internal CCTV Machine.
The ip addresses of the company who access the CCTV are as follows:
The above are fixed IP addresses. The internal machine is on
The outbound ports that I need to open are the following:
I have access to the current config if needs be.

View 8 Replies View Related

Cisco Firewall :: 5510 - Opening Ports For Video Conferencing?

Nov 7, 2011

We have just acquired a cisco profile 42 video conferencing equipment and am required to open ports for SIP and H232, any pointers on hw that can be acquired i have a cisco ASA 5510, Some one told me to open port 16384 but i need pointers on how to do it becuase I already set an access list to any.
the config
Internet -> ASA 5510 -> Switch -> Profile 42 and other devices

View 5 Replies View Related

Cisco Firewall :: NAT / Opening A Port On ASA 5505?

Apr 5, 2012

my friend was against a wall trying to update her office's system, and it seems like every Cisco person in the region has gone on vacation.For some sort of new system her office is getting, she was told that she needed to enable NAT with external IP (The ASA's IP is and internal IP and that port 8222 needs to be open.  I know this is sort of vague, but it's what she was given, and I know the 8222 port is very specific in function,?
At any rate, the best I could come up with was to run:
static (inside,outside) netmask
access-list inbound extended permit tcp any host eq www
access-list inbound extended permit tcp any host eq https
access-list inbound extended permit tcp any host eq 8222
access-list inbound extended permit udp any host eq 8222
access-group inbound in interface outside
But after I inserted this, she did what she was supposed to be able to do (went home and tried to run some sort of remote installation file) and it didn't work...

View 8 Replies View Related

Cisco Firewall :: ASA 5505 / Use The Ethernet Ports As Pure Physical Layer 3 Ports

Jun 9, 2013

We have an ASA 5505. 5505 comes with two default vlans 1&2 with each of them marked as inside & outside respectively.My query is , if i do not want to use vlans on 5505 and only want to use the Ethernet ports as pure physical layer 3 ports, is it possible?i.e. i want to assign a layer 3 ip address on eth0/0 and eth0/1 and make them as the inside & outside interfaces rather than vlans. is it possible to do away with vlans in 5505 & will it work otherwise?

View 3 Replies View Related

Cisco WAN :: ASA 5505 DHCP Outside Interface

Feb 21, 2010

I have an ASA 5505 configured to get a DHCP'd IP address from the ISP on it's outside interface.  The problem I am seeing is when the ISP  renews their IP address, the ASA 5505 is still holding on to the old IP address information.  I have to either manually renew the IP or reload the ASA.  I have the potential of rolling out hundreds of these devices and I would not like my customers to have to reboot their ASA everytime the ISP's DHCP lease experies.  I am using an easy vpn autoconnecting to an ASA 5520.  Static IP's are not an option on the outside interface of the ASA 5505's.

View 8 Replies View Related

Cisco WAN :: ASA 5505 - DHCP On Outside Interface Keeps Renewing

Nov 21, 2011

I've been running a cisco asa 5505 for quite some time and it has been running fine, now all of a sudden it starts to renew it's outside dhcp adress like every 2 hours. I dont think it's the ISP since I have another device connected also using dhcp to the same ISP and it doesnt renew itself, it's just the ASA. Rebooting it, makes it pick up an adress straight away. The interface seems to be up, the GUI just reports "no ip adress" and then the ASA get's a new IP after about 10-15 min without one. Pressing the renew IP adress button in the GUI throws an error.

View 10 Replies View Related

Cisco WAN :: Opening Some Inbound Ports On PIX Version 6.3(5)

Oct 16, 2012

I have been asked to open some ports in order for a CCTV company to connect to an internal CCTV server on our LAN.
We have a Pix running PIX Version 6.3(5) I am ok configuring an ASA for the above but not a Pix.

View 2 Replies View Related

Belkin F9K1002V2 Not Opening Ports

Apr 20, 2012

What I'm trying to do is to get my Xbox connected to the internet through my router (wired connection), but I want to have my NAT open also. But when I put in a static IP into the Xbox manually and open the ports in my router, it makes it so my Xbox can't connect to Xbox Live at all. Although, if I just leave it to the automatic setting on my Xboxs network options, I can connect just fine. But, I end up having a strict NAT type, unless I restore to factory defaults in the networking options on the Xbox.

View 2 Replies View Related

Opening Ports 80 / 5000 And 22 In Modem?

Jan 16, 2013

how can I open my port 80, 5000, and 22 in my modem.

View 1 Replies View Related

Cisco WAN :: 8.0 (3) Opening Up Some Ports For Sftp Client At Work

Mar 23, 2012

I need opening up some ports for a sftp client at work. software version 8.0 (3) device manager version 6.1 (1)

View 4 Replies View Related

D-Link DIR-825 :: Portforwarding Leads To Ports But Not Opening?

Jan 25, 2013

I've had this router for a few months after my last one died and I'm now completely unable to port forward. I follow all the steps to port forward but alas the port is still closed every single time. I've tried a few fixes in the past including disabling UPnP, using those auto port forwarding programs, and creating an exception for the port in my fire wall. Nothing has worked!

View 14 Replies View Related

Linksys Wireless Router :: Ports On Ea4500 Not Opening

May 25, 2012

I just purchased a cisco ea4500 I have set up port forwarding for http, https, rdp. however when I run zenmap and port check it fails says port in use.  I have set it up in sigle port forwarding, rang and port trigging.  I tried RDP and VPN to machine that is hard wired and it fails as well.  My windows server is connected as well however RDP fails on there to

View 9 Replies View Related

Cisco Firewall :: 5505 - Block Everything Except A Few Ports

Apr 15, 2013

We have a client that is running a PC on a internet over satellite. To avoid any unessecery traffic over the satellite link (data traffic is quite expensive), we've suggested to use a 5505, as we had one handy already.
So basically what we wanted was to block everything outgoing and everything ingoing, except for example port 22 (ssh).
But I'm struggling a bit, since this is my first cisco router to be configured.
My interfaces are as follows.
Outside - DHCP
Inside (port 1) -
I'm only running ipv4.
in ASDM I made a static NAT rule for port 22, being forwarded to (the computer)
in Access rules I made under outside (incomming rules) source=any destination=outside service=ssh action=permit
But when I try to add further rules to block everything else, it takes the SSH on port 22 with it. How should I do this the easiest way?
the hardware setup is pretty straight forward.
sat-terminal(with IP running DHCP)   ->  5505 (outside IP=DHCP - inside IP=   ->    computer (IP=

View 24 Replies View Related

Cisco Firewall :: ASA 5505 - PAT Range Of Ports

May 31, 2011

I've an ASA 5505 as my gateway for my internet at home. I've one public IP, so I use Port Address translatetion for my internal clients.
Now i wanna setup a FTP server, on a internal client. I will use Filezilla FTP server. I'm running the FTP server in passive mode, since the FTP server would be behind my ASA firewall/nat device.
I need 50 ports for the passive mode to be running.
I will use port range 50000-50050. I can easy make a firewall rule (access-list) that permit that port range.
But how do I PAT(NAT) a port-range on the ASA device? I can only figure out how to NAT one port at the time.

View 2 Replies View Related

Cisco Firewall :: ASA 5505 Open Ports For DVR?

May 9, 2013

I have an ASA 5505 with ASA version 7.2(2) and ASDM version 5.2(2) and I am attempting to open ports 88 and 5445 and forward them to the IP address of my DVR.  This is all new for me.  I see several posts for other software version to do this same thing but my version appears to be older?

View 1 Replies View Related

Cisco Firewall :: Forward Some Ports On ASA 5505 8.2?

Nov 7, 2011

I need to forward some ports for remote desktop and remote outlook which I host on an internal server. I have looked all over the web and got close, but no hints on how to do it in the asa 8.2. there is an 8.3 guide, but it is just different enough to not work. I am new to this device and cli.

View 3 Replies View Related

Cisco Switching/Routing :: Simple Way Of Opening Ports On 1841 Router

May 12, 2012

Any simple way of opening ports on a 1841 router.I have a working config for internet traffic. I am looking to boot up my Windows Server and Run IIS.

View 1 Replies View Related

D-Link DIR-615 :: Opening Ports For Server Applications Like Ventrilo / Filezilla?

Mar 10, 2011

I've installed XAMPP on one of my Vista computers, and intend to use it as a server.  The internal IP address of the server is A.B.C.D.  The internal IP address of the DIR-615 is A.B.C.E. says that external address of the server is F.G.H.I (and so is everything else inside my network).  I have Filezilla listening on port 21.  I've turned Windows Firewall completely off on the server, and my ISP (Time Warner / Road Runner) says that they never block any port.I tried going to the DIR-615 using Port Forwarding, and set ports 21 & 90 to forward to A.B.C.D, for both UDP & TCP, Allow All, Always.  That didn't work.I tried going to the DIR-615 using Virtual Server.  I set a virtual server on port 21 to A.B.C.D, for both UDP & TCP, Allow All, Always.  It made me turn off Port Forwarding, and it wouldn't let me use both 21 & 90 on the same rule, so made two rules.  That didn't work either.

I tried setting A.B.C.D as a DMZ host.  That still didn't work.I can ftp connect into A.B.C.D from one of the other computers in the network.  People outside the network can't connect to F.G.H.I.  I can't connect to F.G.H.I. from inside the network. The same is true of Apache (but ports 80, 81 & 443), Ventrilo (but ports 3784 & 6100) and MySQL (but port 3306).  I figure that FTP is the easiest to test, so I've been just trying to get that to work.In FileZilla Server Options, I am bound to *, I have no filters, and my passive mode is set to "Retrieve external IP"As far as I can tell, if I've ruled out anything inside my network (by connecting internally), and I've ruled out my ISP (they don't block), then it must be the router.  I think I've done port forwarding according to [URL], and it seems like it should be easy, but I've been trying forever and I can never get it to work.

View 3 Replies View Related

D-link Dir-655 :: Opening Ports - Getting Itunes Wifi Sync To Work?

Dec 27, 2011

I'm trying to get the silly iTunes Wi-Fi sync to work  , and I've been told to ensure that these ports are open:5297 TCP 5298 TCP/UDP and 5353 UDP in the hardware router.  How do I do this with the DIR-655 (HW version A3, FW version 1.35NA)?

View 1 Replies View Related

Belkin Routers :: F5D8233-4 V3 / Opening Ports 1701 And LT2P

Dec 4, 2012

I have a Belkin F5D8233-4v3 N Wireless Router. To get the wireless Directv connection, directv told me I have to get 2 ports open on my router.1701 and LT2P.

View 1 Replies View Related

Cisco Firewall :: Failover ASA 5505 - Setup Second Inside Interface On Firewall?

Feb 19, 2012

I have a Cisco ASA 5505 in our office. We are currently using Interface 0 for outside and 1 for inside. We only have 1 Vlan in our environment. We have two three switches behind the firewall. Today the uplink to Interface 1, to the firewall, on the switch went bad. I want to setup a second inside interface on the firewall and configure it as failover incase this happens again. I want to attach it to the other switch. Can I do this? If so, what do I need to do? would it only be a passive/standby interface?

View 1 Replies View Related

Cisco Firewall :: ASA 5505 Creating Interface Vlan In Firewall

May 3, 2011

I have been working with ASA 5510,20,40,80 but not with 5505 this vlan and its interfaces are quite confusing.Just want to know how it works and its connectivity to Cisco Switch.Do i have to put the interface of the switch in the same vlan as i am creating the interface vlan in firewall ?Now the switch port connecting to this Eth1 interface should also be in the same vlan ? i.e vlan3 ?? or it will be in trunk ? The default configuration shows the eth0 with no access vlan and interface eth1 with access vlan 2... does it mean the eth0 is in vlan1 ? (Nativ Vlan ) ???

View 4 Replies View Related

Cisco Firewall :: Open Ports On ASA 5505 For VoIP?

May 5, 2013

I'm working on setting up a PBX server in our office, and I'm having trouble getting a port opened for SIP on my ASA 5505.I created static NAT rule for SIP traffic from internal server to the outside IP address.I created access rules on outside interface to forward port 5060 to internal PBX server ( also disabled sip packet inspection on the ASA.I'm still receiving a message from the PBX that the firewall is configured incorrectly. 

View 5 Replies View Related

Cisco Firewall :: ASA 5505 Appears To Be Listening On All TCP Ports?

Aug 7, 2011

When I do an NMAP scan against my ASA 5505 on it's internal interface's IP address, it appears to be listening on all TCP ports.  If I do it from across a VPN tunnel, the ports show as open according to NMAP, if I do the scan from the local subnet they show up as unknown. I'm running 8.0.4 code on this ASA.

View 1 Replies View Related

Cisco Firewall :: Allow SIP On Multiple Ports Not Only 5060 (ASA 5505)

May 14, 2012

We've read everything about inspecting SIP packets and allowing them to pass through on port 5060, the default SIP port. However, our setup requires the ASA 5505 to allow SIP on ports 5060, 5160 and 5260.
Is this possible with the ASA 5505? If it's not, it would be a blocking issue for us to move forward with ASA appliances. We are currently investigating in a lab environment and really having difficulties configuring it to facilitate full SIP functionality.

View 1 Replies View Related

Cisco Firewall :: 5505 - Forward Range Of Ports In 8.4?

Mar 11, 2011

I have an ASA 5505 running 8.4(1), and I'm configuring it with ASDM 6.4(1).  The outside interface is configured with a single static address.  I have a few services port forwarded sucessfully to three different servers on the inside network.
I need to make a media proxy on a SIP server available to the outside.  It requires a large range of forwarded UDP ports for the media channels.
I tried adding a network object NAT rule like the others I'm already using to forward HTTP and RDP.  I entered a range of ports for the real port and the mapped port using the syntax 60000-60999.  ASDM accepted it, but the NAT rule list displays "Any" in the service column.  When I apply the change, I get the following error:
nat (inside,outside) static interface service tcp 60000-60999 60000-60999
ERROR: % Invalid input detected at '^' marker.
How do I forward a large range of UDP ports from the outside interface to a single server on my inside network?  I'd like to use ASDM, but I can switch to the CLI if that works better.

View 3 Replies View Related

Linksys Wireless Router :: WRT54G2 - Port Forwarding Not Opening Ports?

Nov 20, 2011

I have a cable modem hooked up to a Linksys WRT54G2 wireless router, which is hardwired to the computer I use.
I go into the router's menu by going through the standard in the browser, and then go to Applications and Gaming. The port I am trying to open is port 25565 for both TCP and UDP. In the Start and End ports I put 25565, and for the end of the IP Address, I put the last digits of my IPv4 address (10). I used a couple of port checker tools, and it is reporting as still being closed.

View 9 Replies View Related

Copyrights 2005-15, All rights reserved