I am trying to set up port forwarding on my Cisco ASA security appliance. I have tried several tutorials and can not seem to get it to work.
The ASA is set up behind my internet providers gateway. The gateway has assigned an IP address of 220.127.116.11/24 to the ASA on the external interface.
My internal interface is 10.1.1.254/24
I have run the following commands to create the Access Rules and NAT Rules.
object network web_server
nat (internal,external) static interface service tcp 80 80
access-list EXTERNAL extended permit tcp any host 10.1.1.40 eq www
access-group EXTERNAL in interface external
If I try to connect to the external IP address (via a cell phones mobile connection) I get the following error on Log Viewer
TCP access denied by ACL from 14x.xxx.xxx.230/61525 to external:172.16.1.66/80
Hopefully I am making an obvious mistake as I can not seem to find where I am going wrong.