Opening Port in ASA

Question

Hi Everyone,
If i need to open specfic port on ASA so that it allow the traffic for that.
What are different ways to open port using CLI?
Thanks
Mahesh

Answer 1

Hello Mahesh,
Lets say you have an internal host 192.168.12.2 that neeeds to be access on port 80 from the outside world.
We will use the outside interface (public IP) to access it
So configuration on ASA 8.2 will be:
static (inside,outside) tcp 192.168.12.2 80 interface 80
access-list outside_in permit tcp any host interface outside eq 80
access-group outside_in in interface outside
Now lets see it on a scenario where no nat is need it:
We have already an internal server with a public ip address 2.2.2.2 and that one needs to be access on port 80
no nat-control
access-list outside_in permit tcp any host 2.2.2.2 eq 80
access-group outside_in in interface outside
So basically if we already have a routable over the internet IP NAT will not be need it!
Remember to rate all of the answers that help ( if you need assistance on how to rate a post just let me know)
Julio