Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've got a new PBX that I've setup and i will be using a 3rd party sip provider, they've gone ahead and given me an outside number an now i need to allow traffic from 3 different hosts to be able to access a range of ports on the pbx.

I'm assuming this is something i could do with a static rule but every time i attempt to add a second host it'll state the rule already exists or conflicts.

I've already setup the ACL's to allow the traffic, it's all a matter of routing traffic from 3 specific outside addresses to a server on my inside interface.

The ASA is a 5505 and runs 8.4 currently.

Show run stat.

davenport# show run static
static (inside,outside) tcp interface 2001 2001 netmask
static (inside,outside) tcp interface ssh ssh netmask
static (inside,outside) tcp interface www Safety2008 8040 netmask
static (inside,outside) tcp interface 8041 Safety2008 8041 netmask
share|improve this question
What does show run static show now? (You might want to anonymize the IPs) – Chris S Dec 28 '12 at 16:50
Can you post some of the config? – GerryEgan Dec 28 '12 at 18:36
@ChrisS added to the main post. – charles.schlue Dec 28 '12 at 22:38
Is there possibly a way to forward a udp range? that seems like the best solution to me, I can figure out how to forward individual ports but not a range. – charles.schlue Jan 3 '13 at 20:47
up vote 0 down vote accepted

Turns out the Answer to this was to simply create a NAT Rule that forwarded all traffic to my pbx from the outside, ACL would block any unwanted traffic, then any other services i provide on the outside simply have a static rule that point to them for example web services.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.