Cisco Firewall :: Brand New ASA 5510 Console Port Not Responding

Jan 17, 2013

Any one experience with this issue that cannot access to console port. USB serial cable and terminal server working fine with all other ASA 5510 except one of them. I rarely see the console and aux port failed to response.

View 2 Replies


Cisco Firewall :: 5510 Can't Ping Device IP Or Connect Via Console

Jun 26, 2012

I was trying to add an Access Rule then Nat rule, they applied ok then i lost connection to my ASA 5510.I cant ping device ip, i cant connect via console , only can acess via Management port, i have pasted Running config. [code]

View 4 Replies View Related

Cisco Firewall :: 5510 Giving Credentials / Username And Password In Web Page / Page Is Not Responding

May 8, 2012

I have ASA 5510 with CSC-SSM-10 .ASA 5510 IOS version- 8.4.2 and CSC-SSM-10 IOS version 6.6.1162.Web  filtering is working fine with respective to my configuration.From yesterday morning, i was facing issue with the sites like gmail, webmail.After giving credentials like username and password in the web page, the page is not resonding.In troubleshooting process, i removed all the acls, class maps  which will direct all the traffic towards the CSC. In this scenario all my mail service sites are opening.If we apply the these ACLs and Class-Maps, only my mail service sites only affecting.

View 1 Replies View Related

Cisco Switching/Routing :: 1700 - Setup For Connecting Router AUX Port To Switch Console Port

Feb 26, 2012

I was looking for a way to connect an AUX port from a 1700 router to a 6500 switch module console port, to see the output of the Switch's on the 1700 router, in case there is a network downtime, I could see what's going on in the switch, what cable should I use ? Also, is  there is any kind of documentation for this type of config what have I seen is very few info.

View 2 Replies View Related

Cisco Firewall :: Open A Port In ASA 5510 Firewall Using ASDM?

Oct 20, 2012

I would just like to to open UDP port 123 in the ASA 5510 Firewall so that our Primary Domain Controller could use this port to sync time with an external time source. We have already added an access rule for this port under the firewall configuration in ASDM 6.4 and this port was also allowed in the inbound and outbound rule of the PDC's Firewall but it seems that it was still blocked.

View 23 Replies View Related

Cisco Firewall :: ASA 5510 6.1 To 8.X Via USB Port?

Jul 23, 2012

I've got an unconnected ASA 5510 running IOS 6.1 that I need to upgrade to 8.X (I believe 8.4 is available). The unit is a blank/default configuration and is not on any network so it can't be easily accessed via Ethernet. Is there a method that I can use its onboard USB port (0 or 1) to plugin a USB memory stick with the 8.X...bin file and process the upgrade that way?

View 2 Replies View Related

Cisco VPN :: ASA 5510 - Gateway Not Responding?

May 8, 2013

What this error means from a Cisco VPN client when trying to connect to a ASA 5510?
VPN Error
VPN gateway not responding (waiting for Msg 2)

View 3 Replies View Related

Cisco Firewall :: Port Forwarding With ASA 5510?

May 2, 2011

i have a asa with a outside IP address of behind this firewall i have a cisco MWR 2941 that i would like to connect to via telnet. its inside ip address is my reasoning for this is because i cannot SSH or telnet from a ASA so i need to have the ASA push my telnet request to the router on its inside interface.i have tried some NAT examples but i am very green with NAT. i have also built access lists that look like the follow " access-list 101 permit tcp any eq 23. and then tied the access-group 101 with the outside interface. this also with no success.

View 1 Replies View Related

Cisco Firewall :: ASA 5510 Blocking Port 25?

Dec 13, 2010

I have a Cisco ASA 5510. I have detected an infected workstation on my internal LAN which has caused my IP to be blacklisted by Barracuda Networks and other RBL. I have scanned and cleaned the workstation removing the spambot. I want to prevent all my internal workstations from sending SMTP traffic on Port 25 through my ASA 5510 device. I only need to allow my Exchange Server access to send out traffic on port 25. configure this setup using ASDM 5.0?  I know it may be easier using CLI, but using the ASDM would really be preferred.

View 4 Replies View Related

Cisco Firewall :: ASA 5510 And Port Forwarding?

Oct 23, 2012

I have a Cisco ASA 5510 appliance running ASDM 6.3 We have a number of public IP addresses associated with our company. In order to utilise the IP addresses effectively I want to use one puplic IP address for two servers running on different ports.e.g.
Public IP address
for both
Server 1 HTTPS and HTTP
 Server 2 FTP
Both Servers live in the same subnet (DMZ) I believe this maybe port forwarding but could be completely wrong. I've tried creating a NAT rule that goes from Server 2 Network object to Server 1 external but this didn't work.

View 2 Replies View Related

Cisco Firewall :: ASA 5510 How To Open Port 25

Feb 14, 2012

We have an ASA5510 that we need to open port 25 to allow mail traffic to our internal Exchange server.We have 2 interfaces defined... one named Internal on eth0/3 ip 10.1.x.x and one named Internet on eth 0/0 ip 96.56.x.x.We followed the instructions in ASDM for allowing access to a public server but confusion over definitions have stopped us.ASDM asks for the internal interface and the internal server IP... no problem there because the internal interface and server have two different IP addresses.  The Internal interface is eth 0/3 ( and the server is
However, when we get to the External interface (eth 0/1) there is only a single IP address 96.56.x.x but the ASDM asks for an Interface IP and the IP people would use to get to the mail server from the outside.  Inasmuch as we have only 1 external IP address (which connects to our upstream Cisco router which in turn connects to the ISP modem) we used the same IP for both but the ASDM returns an error indicating they must be different.
Apparently we do not have a clear understanding of what the ASDM is actually asking for.  When the ASDM asks for the external interface we assumed it was asking for the named value we gave the interface (which is Internet).  The named value "Internet" has an ip associated with it 96.56.x.x.  But when the ASDM asks for the ip people on the outside would use to get to the mail server (we created a named value called "mail server" and gave it the same ip address as the external named value.  This duplication of ip address causes the ASDM to return the error stating that external Interface to be used and the external ip to be used cannot be the same.Have we made an error when we assumed that when the ASDM asked for the external interface it meant the ip of the external interface or was it asking for the eth number (as in eth 0/0) for the interface? 

View 33 Replies View Related

Cisco Firewall :: ASA 5510 8.4 Nat And Port-forwarding?

Jun 6, 2013

I'm trying to forward an internal service on a internal  server to the external interface on the same port on the outside  interface of our ASA.I been searching for a solution for days and found nothing.Here are the relevant parts of my config:

: Saved
ASA Version 8.4(2)
object service TCP-WebServer-8080
service tcp source eq 8080
object network WebServer_Object_10.1.10.7

So it looks like it's being dropped by an ACL, but it looks right to me.

View 4 Replies View Related

Cisco Firewall :: Port Forwarding Using ASA 5510

Dec 3, 2012

I have a ASA 5510. I want to access the internal server IP through the ASA via http://60.54.x.x:8080/sms/DnNotify ( via port 8080).How do i configure it? NAT? ACL? configure port?

View 3 Replies View Related

Cisco Firewall :: Port Forward On Our New ASA 5510

Oct 11, 2011

i´m trying to make a traditional port forward (http to http) on our new asa5510. Previous releases off 5505 and software prior 8.3 was no problem. Could someone tell me how do it in new 8.4 version? I ám a rookie on the new ASA series!
If nothing makes sense in this configuration please give example on how to do it correct. The object on the inside is SRV02 wich is running a webserver on port 80. So i want to open upp for http on outside interface and forward that traffic to srv02 (inside webserver)

View 16 Replies View Related

Cisco Firewall :: 5510 - ASA A/A Port Connectivity

Sep 1, 2011

I'm not sure how to connect my firewall for Active/Active.
I'm sure the 5510 has layer 3 ports.
Can i configure more than one port to sit on the same VLAN?
Or configure more than one port to Trunk the same VLANs.

View 3 Replies View Related

Cisco Firewall :: ASA 5510 / Nat With Port Translation With 8.4(3)?

Mar 10, 2012

Trying to translate telnet for switches to the outside ip address at some random ports. -> -> ->
ASA 5510 running 8.4(3):
interface Ethernet0/0
nameif outside
security-level 0
ip address
 interface Ethernet0/1.200
vlan 200
nameif inside
security-level 100
ip address

I can not access the switch at .  What am I doing wrong?  Or should cleaning toilets be something I really should look at!  Now if i run this NAT statment:
object network Switch_TN
nat (inside,outside) static service tcp telnet 2301
I am able to access the switch at

View 7 Replies View Related

Cisco Firewall :: Enable Port Forwarding On CLI For ASA 5510?

Aug 21, 2011

how do i enable port forwarding on the CLI for ASA 5510. outside subnet is when i try to ping another IP with that range i can't access.

View 37 Replies View Related

Cisco Firewall :: How To Create Port Forward In ASA 5510

Sep 8, 2010

Successfully creating a port-forward in ASA5510, ASA version 8.3(1) ASDM6.3(1)?I have spend hours now trying, but I'm still unsuccessful.What I want is a simple: "if this particular ip-adress hits the wan interface on this tcp-port redirect to this inside ip-address on this tcp-port.I have never had any trouble on any other firewall creating something like this, but the ASA is killing me.

View 10 Replies View Related

Cisco Firewall :: ASA 5510 - Always Allow Traffic On A Single Port

Feb 1, 2012

I have a private network behind a configured Cisco ASA 5510. I need to send data back and forth between a server on the inside network and a device on the outside network on port 44818. No amount of configuration is allowing this to happen. The packet tracer always fails on of the implicity "deny" rules, even though my other rule should explicitly permit it. I also realize I need to set up routing from my outside network to the inside network, but I cannot see from the documentation how to do that on this particular port without simultaneously breaking my outside connection.
The inside IP for the ASA is
The outside IP for the ASA
Here is my current configuration:
: Saved
: Written by enable_15 at 08:49:25.956 UTC Thu Feb 2 2012
ASA Version 8.2(5)


View 6 Replies View Related

Cisco Firewall :: Setup Port Mirroring On An ASA 5510?

Sep 14, 2011

I'm trying to setup port mirroring on a Cisco ASA 5510, but when I try to use the switchport monitor command, that command is not recognized.I've selected what interface I want to configure (conf-if), but the switchport command seems to not be part of the IOS.I'm running ASA version 8.2(1)

View 9 Replies View Related

Cisco Firewall :: How To Configure NAT Port Range On ASA 5510

May 22, 2012

i have a cisco asa 5510 and would like to add a NAT rule for a range of ports like 50000-59999

View 15 Replies View Related

Cisco Switching/Routing :: 5510 DNS And Internet Responding

Mar 30, 2012

i have a problem with ASA 5510 version 8.2(1),i have a mac os x 10.6.8 dns server when the asa is online and i want to use the internet my internet is very slaw it neede about 1.5 min to open and the asa log viewer shows too many drops, i have only the rule  allow any tcp/udp domain.

View 1 Replies View Related

Cisco Firewall :: ASA 5510 / Port Forwarding For Portal Access?

Dec 20, 2011

I need to forward port 55443 to an internal address ( lets call it from two outside ip's ( and addresses need to see the server IP address ( only and nothing else. It is an ASA 5510?

View 9 Replies View Related

Cisco Firewall :: Unable To Reserve Port 443 For Static PAT In Asa 5510

Jul 15, 2011

This problem applies (in my case) to our ASA5510. The issue here is that the http service on the ASA is runnnig off of the standard port 80. Login to the firewall and run the http server enable http server enable 8080,Now you should be able to add a NAT/PAT on port 443 to another server of your liking. Just remember when you attempt to use ASDM to manage the ASA in the future to specify the new port 8080.

View 1 Replies View Related

Cisco Firewall :: ASA 5510 - Setting Up SMTP Port Block?

Mar 5, 2012

how to go about setting up the ASA to block any SMTP traffic outbound except for our Exchange Server. This is in relationship to a SpamBot issue that blacklisted us. I have an ASA 5510 running version 6.2(5) / 8.2(2) with three ports. DMZ, Inside and the Outside interface. Up till today, I only needed to block outside traffic to our internal network which I used the ASDM to configure a rule on the outside interface for an incoming rule. I am assuming I need to create an outgoing rule on the outside interface; however, just to make sure I understand the terminology/traffic flow, I created the rule with my computer as the source ( with ALL destination and the service as HTTP. My logic, which seems to fail here, is that any traffic from my computer going outbound would be blocked; however I am still able to browse... That said, if I were to change the source as the Exchange server and the Service Type to SMTP, it would not actually block traffic and therefore not solve our problem.  I even gone as far as permitting traffic from my computer, expanding the hit counter and I see no hits.  So I am no doubt doing this wrong. What I do know, is when I first created the rule, a second rule was automatically created (Implicit rule) that deny all sources and blocked all HTTP traffic until I changed it to Permit?

View 2 Replies View Related

Cisco Firewall :: ASA 5510 - Open Outbound Port For Specific IP

Dec 6, 2012

We have a ASA5510 and I need to open port 22 for a speacific IP in our LAN outbound only.      

View 15 Replies View Related

Cisco Firewall :: 5510 NAT Port Forward Based On Public Source IP?

Dec 27, 2011

I have one public IP address but multiple local servers that run on the same port. I cannot change the port the clients use to connect to this server, so I can't do a port map in my NAT router. The solution I had in mind, is to filter on source address. If a client from public IP X.X.X.X connects to port Z, I want it to go to internal server and if a client from public IP Y.Y.Y.Y connects to port Z, I want it to go to internal server Is this possible? I'm using an ASA5510 but I could also switch to a 5505 for this.

View 3 Replies View Related

Cisco Firewall :: Blocking Outbound Port 80 Traffic Using ASDM On ASA 5510

Nov 26, 2012

I am attempting to block outbound traffic for a specific PC on my LAN using the ASDM.

View 2 Replies View Related

Cisco Firewall :: 5510 Recommended Port-security Settings For ASA HA Failover

Dec 28, 2011

I have a pair of ASA 5510s configured in active/standby mode. I have already configured the fail over settings on the firewalls. Both firewalls are connected to a 2960G. I made a change to the interfaces on the 2960 to allow 2 mac addresses on each port. [code]

Upon testing failover via the failover active command, I get port-security errors on the outside interface for each device:%PORT_SECURITY-2- PSECURE_ VIOLATION: Security violation occurred, caused by MAC address aaaa.bbbb.cccc on port GigabitEthernet0/8. After a few minutes, the error goes away and I can then connect to each firewall. It seems that it still waits for the aging time to expire before allowing the other MAC address. Shouldn't the "maximum 2" setting allow for both mac addresses?
I'd rather not have to hardcode the firewall's MAC addresses on each switchport because I could see this causing problems for us down the road. Is there anything else that can be done?

View 1 Replies View Related

Cisco LAN :: AS5350 Can't Connect With Console Port

Jun 22, 2012

I had a Cisco AS5350 , and it works correctly through the year. but now I could not conncet to it even with console cable .my windows is server 2008 ,COM1,9600, but in hyper terminal I couldnt see anything from cisco,even I have change my console cable , but it still doesnt work.

View 11 Replies View Related

Cisco Firewall :: 5510 - Outlook Port Only Permit (POP3 995 / SMTP 587) With TLS Encryption

Jun 3, 2012

In Cisco ASA 5510 , outlook port only permit ( pop3 995/smtp :587) with TLS encryption. How we can do it thru ASDM .

View 1 Replies View Related

Cisco Firewall :: ASA 5510 - Time Range / Allow Single Port During Business Hours Only

Apr 1, 2012

I'm new to an ASA 5510 running 8.4(3) and am trying to figure out something regarding time ranges in ASDM. I simply want to allow a single port during business hours only (I'm not concerned about open sessions needing to be closed). So as an example I add a rule something like:
(RULE1 on the internal interface) SRC=INTERNAL DEST=ANY SERVICE=RDP ACTION=PERMIT with a time range set for weekdays 8:00-16:59. I did a test after 5pm on a weekday and was still allowed to do RDP to a server (from INTERNAL), and after using the packet trace tool saw it was still passing through due to a rule a couple lines down (rule 4) that allowed a port range that happened to include port 3389. So my question is if I specify an "allowed" time range and someone attempts access outside that time range, why doesn't it drop it right there? I guess I'm assuming that anything outside the "allowed" time range would be dropped but that doesn't seem to be the case. I'm also assuming the rule base is processed top to bottom.

View 2 Replies View Related

Cisco :: Access Directly LAP 1522 Using Console Port?

Sep 4, 2012

but is there anyway to access directly a LAP 1522 using a console port?

View 5 Replies View Related

Copyrights 2005-15, All rights reserved