Kiran, That's right. If you run into issues trying to pass SIP through your firewall, you may need to look at the default service policy. There are some protocol inspection rules enabled by default that might affect the passing of SIP traffic.
-ryan -----Original Message----- From: Oddiraju, Kiran @ London SMC [mailto:[email protected]] Sent: Wednesday, July 22, 2009 4:38 AM To: Ryan West Cc: [email protected] Subject: RE: NAT and PAT on ASA Hey Ryan, That seems to be working, thanks. So if I want to allow more ports we do it the same way right? access-list myaccesslist ext permit tcp any host 58.66.76.88 eq SIP access-list myaccesslist ext permit upd any host 58.66.76.88 eq SIP Thanks, Kiran -----Original Message----- From: Ryan West [mailto:[email protected]] Sent: 21 July 2009 19:48 To: Oddiraju, Kiran @ London SMC; [email protected] Subject: RE: NAT and PAT on ASA static (inside,outside) 58.66.76.88 192.168.0.100 show run access-group take note of the acl to the outside interface, ACLs are on the ASA are inbound. access-list <myaccesslist> ext permit icmp any host 58.66.76.88 echo access-list <myaccesslist> ext permit tcp any host 58.66.76.88 eq www -ryan -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Oddiraju, Kiran @ London SMC Sent: Tuesday, July 21, 2009 2:09 PM To: [email protected] Subject: [c-nsp] NAT and PAT on ASA Guys, I am new to the ASA world, I have a bunch of external IP's from the ISP and I have an inside host that I want to access externally. How do I translate an inside ip (192.168.0.100) to an outside address (58.66.76.88) on the ASA? I should be able to ping and www from outside world to my inside host. Please let me know how to accomplish this. Many thanks, K CB Richard Ellis Limited, Registered Office: St Martin's Court, 10 Paternoster Row, London, EC4M 7HP, registered in England and Wales No. 3536032. Regulated by the RICS and an appointed representative of CB Richard Ellis Indirect Investment Services Limited which is authorised and regulated by the Financial Services Authority. This communication is from CB Richard Ellis Limited or one of its associated/subsidiary companies. This communication contains information which is confidential and may be privileged. If you are not the intended recipient, please contact the sender immediately. Any use of its contents is strictly prohibited and you must not copy, send or disclose it, or rely on its contents in any way whatsoever. Reasonable care has been taken to ensure that this communication (and any attachments or hyperlinks contained within it) is free from computer viruses. No responsibility is accepted by CB Richard Ellis Limited or its associated/subsidiary companies and the recipient should carry out any appropriate virus checks. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ CB Richard Ellis Limited, Registered Office: St Martin's Court, 10 Paternoster Row, London, EC4M 7HP, registered in England and Wales No. 3536032. Regulated by the RICS and an appointed representative of CB Richard Ellis Indirect Investment Services Limited which is authorised and regulated by the Financial Services Authority. This communication is from CB Richard Ellis Limited or one of its associated/subsidiary companies. This communication contains information which is confidential and may be privileged. If you are not the intended recipient, please contact the sender immediately. Any use of its contents is strictly prohibited and you must not copy, send or disclose it, or rely on its contents in any way whatsoever. Reasonable care has been taken to ensure that this communication (and any attachments or hyperlinks contained within it) is free from computer viruses. No responsibility is accepted by CB Richard Ellis Limited or its associated/subsidiary companies and the recipient should carry out any appropriate virus checks. _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
