ASA 5510 - Portforward Rule locked down to specific Public IP's range

[scooter2179]

I have a vendor that wants to run sql queries on our server. They normally just use citrix, rdp to the server and then copy the database back to their location. But it would be much easier if they could just run the query from their location. I would like to setup a port fowarding rule for TCP 1433 to only allow this from the vendors public ip range.


Example (Not really my IP Information)

Vendors Public IP Range. 173.15.54.160/29
Our public IP that the vendor would use to get to the internal server on port 1433 38.144.56.40
Port TCP 1433
Internal server ip address 10.1.1.10.



I have used the gui and cli on the firewall. I have created rules for rdp in our firewall but havent used an access list to lock down a port to a public ip range. Any help would greatly be appreciated.

 

[unclerico]

The config will vary depending on the version of code you're running.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)