I have an ASA 5505 on 8.2 in the field already working. It has two interfaces, LAN/inside and WAN/outside. There is an L2 site-to-site IPSec tunnel configured from the outside interface of the local ASA to the outside interface of a remote F/W (between local internal host .1/32 and remote internal host .1/32).
I want to enable port forwarding for a single port to the outside IP of the local ASA to forward to the internal host .2
If I apply the below configurations at the CLI will this let in the desired traffic without disrupting the IPSec tunnel? I'm new to ASA's and don't want to stop the required ports (UDP 500/4500) from hitting the external interface and the IPSec tunnel coming up or anything like that.
access-list outside_access_in extended permit tcp any interface outside eq 555 static (inside,outside) tcp interface 555 192.168.0.2 555 netmask 255.255.255.255
There is currently no outside_access_in so if I add this, will it implement an implicit deny any after and stop the IPSec tunnel?