Setup on ASA Firewall – 85.234.75.66 to be NaTTed through to 172.16.0.128.
Allow Ports 9800-9806 tcp and 9810-9822 udp Inbound/Outbound.
Allow LAN 172.16.0.128 outbound port 9400-9422 tcp/udp.
Create 1-1 Static NaT :
static (MPLS,PublicIP) 85.234.75.66 172.16.0.128 netmask 255.255.255.255
Allow Public Interface Inbound Firewall Rule tcp/udp :
access-list PublicIP_access_in extended permit tcp any host 85.234.75.66
object-group FRONT_LINE_COMMUNICATOR_tcp
!
access-list PublicIP_access_in extended permit udp any host 85.234.75.66
object-group FRONT_LINE_COMMUNICATOR_udp
!
Create Service Port Object-Group :
object-group service FRONT_LINE_COMMUNICATOR_tcp tcp
description FRONT-LINE-COMMUNICATOR
port-object range 9800 9806
!
object-group service FRONT_LINE_COMMUNICATOR_udp udp
description FRONT-LINE-COMMUNICATOR
port-object range 9810 9822
!
object-group service FRONT_LINE_COMMUNICATOR_tcp_udp tcp-udp
description FRONT-LINE-COMMUNICATOR_tcp_udp
port-object range 9400 9422
!
Create IP Network Object-Group :
object-group network FRONT_LINE_COMMUNICATOR_MPLS_HOST
description FRONT_LINE_COMMUNICATOR_MPLS_HOST
network-object 172.16.0.128 255.255.255.255
!
Allow Internal LAN Outbound :
access-list MPLS_access_in extended permit tcp
object-group FRONT_LINE_COMMUNICATOR_MPLS_HOST any
object-group FRONT_LINE_COMMUNICATOR_tcp
!
access-list MPLS_access_in extended permit udp
object-group FRONT_LINE_COMMUNICATOR_MPLS_HOST any
object-group FRONT_LINE_COMMUNICATOR_udp
!
access-list MPLS_access_in extended permit ip
object-group MPLS_Sites object-group FRONT_LINE_COMMUNICATOR_WAN_HOST
object-group FRONT_LINE_COMMUNICATOR_tcp_udp
!
access-list MPLS_access_in extended permit ip
object-group FRONT_LINE_COMMUNICATOR_MPLS_HOST any
object-group FRONT_LINE_COMMUNICATOR_tcp_udp
Comments
(There are currently no comments for this post.)