I am having cisco asa 5520 with internet having public ip and cisco 2911 with mpls link in my office. the mpls link is between my HO and my branchmi am putting my webserver in the branch side i want to port forward one of my publicip in my office to be forwarded to branch we, server.is it poosible on the firewall ouside the local network.
View 3 RepliesI am trying to forward all the traffic of a particular port number to my outside interface forwarded to an internal IP address.
View 1 Replies View RelatedI am trying to correctly configure our ASA 5520 and our Mitel Border Gateway in our DMZ. In the documentation for the Mitel border gateway it wants me to set up 2 external IP's on my ASA one to allow 443 traffice into the MBG, and another for 443 traffic that needs to be forwarded to port 4443 for the MGB in the DMZ. My problem is I don't know how to do this. the MBG only has one IP, and I need to have 2 different URL's mapped to two different external IP's both externally using port 443, and one of them forwarding to 4443 on the DMZ interface.
View 10 Replies View RelatedI have few inter-AS and Hub & Spoke MPLS L3VPNs up and running but, all of them uses plain IPv4 on the PE-to-CE connecting interfaces for switching the L3VPN customer traffic. While, this is ok to route traffic between customer sites over a ISP backbone using the VRF and MP-BGP/LDP configurations which does the MPLS forwarding in the ISP backbone, i would like to know, how to enable MPLS forwarding on the PE-CE links as well to make it MPLS right from CE1 - PE1 - P - PE2 - CE2 all the way for the VPN traffic.
This way, even the last mile access to CE devices will be an MPLS link over a Ethernet PHY so that, the traffic originating from CE1 to CE 2 will be carried on a MPLS tagged Ethernet frame instead of IPoEthernet frame.
We have a ME6524 running as a MPLS P router. We want to mirror a port to capture a specific traffic stream (to a probe). As the port is an MPLS LDP port will this work, will both the VACL and SPAN work with MPLS tagged packets, or does the mirror and VACL work after the labels have been removed..?
View 1 Replies View RelatedRegion : UnitedKingdom
Model : TD-W8970
Hardware Version : V1
Firmware Version : 0.6.0 0.11 v000c.0 Build 121203 Rel.46289n
ISP : Virgin Media
Is there any way of forwarding an external port to a different internal port on the TD-8970 ?I saw a question posed on an Australian forum implying that it might be provided in a later firmware release.Our TD- 8970 has replaced a previous NetGear WAG 320N which had this facility, and is useful to provide access to multiple machines without having to modify each individually to use a different port.
So here is my network.
ASA5505--->Cisco1841--->Cat2960
Code
ASA asa831-k8.bin
Cisco 1841 c1841-adventerprisek9-mz.151-4.M2.bin
Cat 2960 c2960-lanbasek9-mz.122-55.SE1.bin
and here is my dilemma.
I can SSH from the internet to my ASA on default port 22, directly to my public IP. I can SSH from the internet to my Cisco 1841 on port 2001. I can not however, SSH to my Cat 2960. From what i can tell, on the Cat2960 i can't change the default port 22 for SSH to different port, just like i did on the Cisco 1841. I looked to see if I can change the default port for SSH on he ASA, it does not look like this is an option.
The bottom line is that i want to be able to SSH to all three devices from the internet. I only have one public IP. As of now, what i can do is only SSH to the ASA on default port 22 directly to the public IP and Cisco 1841 on port 2001. It appears that changing the default SSH port on Cat 2960 is not an option. It also appears that I can't change the default SSH port on the ASA, if i could, i would and then i should be able to SSH to the Cat 2960 on port 22. No matter what i did on the ASA, it always listens on port 22 for SSH connections.
show asp table socket
TCP 001f549f <<pub IP>>:22 0.0.0.0:* LISTEN
how do i make it listen on different port?
Here is relevent config for SSH for cisco 1841 (port forwarding)
ON ASA
object network ROUTER
host 10.10.1.1
[Code].....
I am having an issue opening a port (4040) on the 655 for my Fedora-based subsonic server. Inside the LAN, I can see the device from other peer machines, so I am confident the port is open and listening. However, I can't seem to get to the machine-port from outside/internet.
I have tried Virtual Server and Port Forwarding with single port. The server has a stactic IP which I've included in the DHCP range and outside the range. I have a DSL connection (AT&T), modem only. I have updated firmware. I have exhausted the Subsonic community's knowledge, everything points to the router, but all the settings seem correct. What am I missing? Is if possible there is a defect in the router? (don't laugh). Is there a way to trace a request to that port to see where it is hanging?
(yes, I've STFA, but don't know what else to do).
Running ASA5585’s in active/standby across a local campus MPLS network. Supported design, leading practice etc. Specifically our design is that two ASA5585 are configured as active/standby through a local campus MPLS network over 10gig links through ASR9k etc. The ASA’s are providing inter-vrf routing capability only with p2p l2vpn circuits configured for each logical interface between the ASA over MPLS etc.The failover link is via a direct fibre and the state link will be through a p2p l2vpn (option for direct fibre also)Is this a supported design to begin with?
View 2 Replies View RelatedI am trying to open up port 32400 on my 881w Cisco router but I have not had any success I need to configure manual port-forward to enable my Plex Media server.
View 1 Replies View RelatedWe have an ASA 5520 and it's inside interface is currently plugged into a fast ethernet port on a 3750. I have just bought a 1gig SFP module and have copied the fast ethernet port config to the gigabit port, but the port seems to be flapping
The port conf gi is this:
interface GigabitEthernet1/0/4
description Link to Inside ASA
switchport access vlan 2
switchport trunk encapsulation dot1q
I have got ASA 5520. How to use the management port as a normal port on ASA. What are the basic reqirements for that.
View 3 Replies View RelatedHow I do it? I know nothing about this stuff... I can't open the ports.
View 1 Replies View RelatedI was trying to port forward and could not get it to work. I run a Camfrog room sever of my desktop computer. I needed the TCP port 6005 open to the desktop and UDP ports 5000-15000. I enter that in to the Port forwarding setting but it never work. So later on today I try this I blank out the TCP 6005 in the port forwarding and letf the UDP setting in it and saved it. Then I went to the Virtual server settings and add camfrog3 in the name and put the TCP port 6005 in to it and check it and save the setting and bingo it work.
View 1 Replies View RelatedAlright, so I'm trying to set up a Minecraft server without having to use some sort of hosting program, such as LogMeIn Hamachi. I have tried port forwarding both my external IP from "whatismyip.com" and from ipconfig in the CMD WITH the correct Minecraft port, and others still cannot connect. note that I can only connect to my own server when I use the IPv4 address from my CMD. get my server working so that others can connect? (I have been sure to change my "server properties" file's "server-ip" line accordingly.)
View 1 Replies View RelatedI setup port forwarding for many router before, but I couldn't get this one to work.I triple check all of my configuration, they all setup correctly. But the port/ports on the router is not open.
View 1 Replies View RelatedI have read the sticky about the Game fuel, and i have tried resetting everything, static IP address, all the info i have found on line. i still i keep getting booted when i join a game, or most of the time i cannot join a party. No matter what changes I make it gets worse than factory setting. i have read for hours on different ways to set up the router and what not. i have changed settings on the PS3, router and still getting nowhere.so can some one pls tell me how to set this thing up before i use it as anger management.?i know how to access the router page . but i don't get the setting up port forwarding.
View 10 Replies View RelatedI have a cisco 5520 with 8.4.4(1) and I already have a NAT for an email server on it.Here is the IP and ports on current configuration:
Email Server Private IP: 1.1.1.1
Email Server Public IP: 2.2.2.2
Email Server Local Ports : 25, 587
Right now I have ports 25 and 587 opened for 2.2.2.2 so, now I need to add a port redirection for another port:
New Port : 8925
I need to redirect 2.2.2.2:8925 to 1.1.1.1:587
i'm having a problem portforwarding/redirection for the pix 501?I'm trying to open the ports 49003 and 40085 in order to view our dvr remotely and i'm not exactly sure how to it.
View 11 Replies View RelatedI have an issue with portforwarding in my teleeye cctv behind asa 8.4. I can browse the DVR outside via http however when i attempt to login, "server busy" will prompt afterwards. Note: Theres no issue when acesssing the DVR locally.
Heres my config.
OUTSIDE INTERFACE:
interface Ethernet0/3
speed 100
duplex full
[Code]...
So I have two xbox 360's plugged directly into my dir-655 router with Ethernet cables. I have no idea how to port forward these, correctly and everything I try ends up with my router being reset. I don't have a pc connected to the router, only a wireless laptop.
opening ports for multiple xbox 360's (Black Ops is what we are trying to play).
One thing I do know is that when I tried portforward.com's walk-thru for port forwarding, when I enter the ports into the dir-655 port-forward menu, I can no longer connect to Black Ops at all, it says servers are down (WHICH THEY ARE NOT I CHECKED).
I am using DIR-655 A4 router and I have a server that needs DMZ and a PC that needs a port.So, I have set the dmz to 192.168.0.100 (SERVER) and set the port 2000(or any) to forward to 192.168.0.2 (PC).What I found out was, the port forwarding works well for several hours and suddenly it fails and won't forward until I reboot my 655 router. I am really tired doing this every day. I tried firmware 1.21 to 1.35 and non of them were good.I know that 655 has good performance compare to its price but I think it has world's worst firmware.
View 9 Replies View RelatedOne of the persons involved in a home network has installed a Dlink DIR-825 Rev-B Extreme router on the Comcast cable system to allow a 'better' wireless signal on upper floors of the home. Two others involved in the same home network use a 'secure desktop access' software called NetOp to access the network remotely. To facilitate this software, we must 'port forward' port 6502 on BOTH UDP and TCP to the single system that is accessed.
However, this setup (simple port forwarding) does not seem to work - neither does 'virtual server', for that matter. Prior to this router being installed, it was extremely simple to accomplish this remote access using a Linksys router, so our software firewall configuration has not changed but the new Dlink seems unable to allow remote access.
How (and via which of these access methods - port forwarding or virtual server) would be best? This configuration seems frustratingly difficult to accomplish and I'm about to take the Dlink 'out' of the network and re-install the Linksys with a 'high-gain' external antenna to facilitate simple signal enhancement.
Edit I've found a work-around. It's on page 2: [URL]
I'm having this really weird issue with my DIR-655 revB. I have some port forwarding rules set up and externally they work fine. However, if I try connecting to my IP address using those same ports from a computer within my LAN, it won't connect.
Externally, I can ping my WAN address and connect through forwarded ports. No problems. Internally, pinging my WAN address apparently works (just now is the first time that's worked for me), however I can't access any of my computers using the WAN IP and port forwarded ports. I can access them by going directly to their hostnames or LAN IPs.
Things I've tried:
-Disabling/enabling firewalls on all computers involved
-Disabling/enabling QoS engine
-Disabling/enabling DNS relay
-Disabling/enabling Advanced DNS
-Adding custom nameservers from Google and Comodo
-Restarting computers
-Clearing DNS cache (I use a dynamic DNS name which works externally but not internally. This gets the correct IP internally and connecting directly to the IP doesn't work either.)
-Modifying the NAT Endpoint Filtering settings
I have an external DSL modem connected to the router using PPPoE if it matters.
The weird part is that it works externally but I've modified all of the values I can think of in the config with no luck. I upgraded to the DIR-655 from a DIR-615 which had all these settings in it and worked fine (until it started acting up which is why I replaced it).
I recently upgraded my internet service and received a D-Link DIR-815 from the company as they couldn't get our older router working with the new service (4G)
My brother plays Star craft and you have to forward ports to be able to host games for others to join, but it doesn't work.
I know how to port forward because our old router had exactly the same setup, but I have one issue though, when I look at the DIR-815's manual, and even in posts made by D-Link, I've seen them asking if the filters for the firewall are set to Endpoint Independent for UDP/TCP, now I know where this is, it's under Advanced/Firewall Settings, it even shows it there in the manual, but it's not there at all under my firewall settings, my older DIR router had it and we had no problems port forwarding, I'm not sure if it was removed in a later hardware or something?
i have a asa with a outside IP address of 140.32.121.5. behind this firewall i have a cisco MWR 2941 that i would like to connect to via telnet. its inside ip address is 10.10.10.2. my reasoning for this is because i cannot SSH or telnet from a ASA so i need to have the ASA push my telnet request to the router on its inside interface.i have tried some NAT examples but i am very green with NAT. i have also built access lists that look like the follow " access-list 101 permit tcp any 10.10.50.2 eq 23. and then tied the access-group 101 with the outside interface. this also with no success.
View 1 Replies View RelatedI need to open port range 554 - 558 to a DVR on the internal network. Also, I need to NAT one of my public IP's to the DVR. How is this accomplished in 8.4? I was able to do it in an older version ASA software.
View 3 Replies View RelatedI've tried setting up some simple port forwarding on my ASA, where I want to forward one port on the external interface for both UDP and TCP to the same port on an internal server.
It works fine for UDP, but all TCP packets are dropped on the outside interface, even though the configuration for UDP and TCP is basically the same! This is my config:
object network MY_SERVER
host 10.10.1.4
object service TCP_MY_SERVICE
[Code].....
Port count goes up on line 2 (UDP) but never for line 1. I just see the packet denied instead. Same thing happens in the packet tracer, a packet destined for my external interface on that port for UDP is allowed and NAT'd just fine. TCP it gets dropped by the ACL on the outside interface.
I have a Cisco ASA 5510 appliance running ASDM 6.3 We have a number of public IP addresses associated with our company. In order to utilise the IP addresses effectively I want to use one puplic IP address for two servers running on different ports.e.g.
Public IP address 78.109.174.100
for both
Server 1 HTTPS and HTTP
Server 2 FTP
Both Servers live in the same subnet (DMZ) I believe this maybe port forwarding but could be completely wrong. I've tried creating a NAT rule that goes from Server 2 Network object to Server 1 external but this didn't work.
have a couple of ASA 5505's which work fine for what they are doing VPN and all that - we have 1 DLINK DFR-700 Firewall left and I need to get a new ASA to replace this since it is old.All this box really does is port forward external clients to 1 address on the internal lan for client software updates.So lets say we have client a with IP 1.1.1.1 and client b has 2.2.2.2 - at the moment this is what happens client a and b come in through http and get mapped to the internal http server 10.10.1.2So I need to setup about 100 clients which can come in through http only - get mapped to the internal IP and also keeping the internal server to be able to access anything outside.
View 16 Replies View RelatedI have ASA5505 and am having issue with port forwarding NAT . [code]
View 11 Replies View RelatedI'm trying to forward an internal service on a internal server to the external interface on the same port on the outside interface of our ASA.I been searching for a solution for days and found nothing.Here are the relevant parts of my config:
: Saved
:
ASA Version 8.4(2)
!
object service TCP-WebServer-8080
service tcp source eq 8080
object network WebServer_Object_10.1.10.7
host 10.1.10.7
[code]....
So it looks like it's being dropped by an ACL, but it looks right to me.
I have a ASA 5510. I want to access the internal server IP through the ASA via http://60.54.x.x:8080/sms/DnNotify ( via port 8080).How do i configure it? NAT? ACL? configure port?
View 3 Replies View Related