ASA Port Redirection not working.

[scntech]

Can someone please look at my config and see why I cannot redirect VNC traffic to an internal address. It is driving me crazy!!

interface Vlan2
description xDSL modem
nameif outside
security-level 1
ip address 142.XXX.XXX.XX7 255.255.255.0
ospf cost 10

interface Vlan32
description Connection to NOPS
nameif NOPS-ISP
security-level 50
ip address 192.168.90.254 255.255.255.0
ospf cost 10

static (NOPS-ISP,outside) tcp 142.XXX.XXX.XX7 5900 192.168.90.252 5900 netmask 255.255.255.255

access-list outside_access_in extended permit tcp object-group MPEG_VNC_Controal any log

Thanks in advance.

 

[brianinms]

Change

static (NOPS-ISP,outside) tcp 142.XXX.XXX.XX7 5900 192.168.90.252 5900 netmask 255.255.255.255



To:

static (NOPS-ISP,outside) tcp interface 5900 192.168.90.252 5900 netmask 255.255.255.255

Does that object group specify what remote subnet can vnc inbound?

 

[scntech]

thanks alot Brian that was it! One more question though, yesterday I had tried that same nat rule and the logs were producing "no translation group found". What does this error mean? At the time yesterday I didn't have a dynamic NAT for that interface and now I do?

Thanks again!