Cisco Asa 5505 problem with port forwarding

Dear Experts,
I am using router Cisco ASA 5505

I have configure port forwarding so client from Internet can access my Web server behind the NAT . However, when clients from my local area network try to access the web server using the external IP of the Cisco router (the same address as client in Internet) , the connection fails. What can be wrong?

Thanks for help

Adam

The output of show runnig-config:

Result of the command: "show running-config"

: Saved
:
ASA Version 8.0(3)
!
hostname ciscoasa
enable password nQhAlvOXR78/pfRg encrypted
names
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
 nameif outside
 security-level 0
 ip address 83.100.200.102 55.255.255.252
!
interface Vlan12
 description zarzadzanie
 no forward interface Vlan2
 nameif zarz
 security-level 100
 ip address 192.168.2.1 255.255.255.0
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
 switchport access vlan 12
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
clock timezone GMT 0
same-security-traffic permit intra-interface
object-group service ssh1772 tcp
 description ssh1722
 port-object eq 1722
object-group service rdp tcp
 description rdp
 port-object eq 3389
access-list inbound extended permit tcp any interface outside eq www
access-list inbound extended permit tcp any interface outside eq 3389 log debugging
access-list 102 extended permit tcp any interface outside eq 3389
access-list 102 extended permit tcp any host 83.100.200.10 eq 3389
access-list 102 extended permit tcp any host 83.100.200.10 eq 88
access-list 103 extended permit tcp any interface outside eq www
access-list 103 extended permit tcp any interface outside eq 3389
access-list 103 extended permit ip any any log debugging
access-list 103 extended permit icmp any any log debugging
access-list 103 extended permit ip 192.168.1.0 255.255.255.0 any
access-list inside_access_in extended permit ip any any log debugging
access-list inside_access_in extended permit icmp any any log debugging
access-list inside_access_in extended permit tcp any any log debugging
access-list inside_access_in extended permit ip any host 83.100.200.10
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
mtu zarz 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-603.bin
asdm history enable
arp inside 10.0.0.18 0030.c103.c3ba
arp timeout 14400
nat-control
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
nat (inside) 0 192.168.1.0 255.255.255.0 outside
static (inside,outside) tcp interface 3389 192.168.1.150 3389 netmask 255.255.255.255
static (inside,outside) tcp interface www 192.168.1.99 www netmask 255.255.255.255
static (inside,outside) tcp interface sqlnet 192.168.1.100 sqlnet netmask 255.255.255.255
static (inside,outside) tcp interface 1443 192.168.1.100 1443 netmask 255.255.255.255
static (inside,outside) tcp interface 1531 192.168.1.101 sqlnet netmask 255.255.255.255
static (inside,outside) tcp interface 8021 192.168.1.100 8021 netmask 255.255.255.255
static (inside,outside) tcp interface 1722 192.168.1.100 1722 netmask 255.255.255.255
static (inside,outside) tcp interface https 192.168.1.100 https netmask 255.255.255.255
static (inside,outside) tcp interface 32 192.168.1.100 ssh netmask 255.255.255.255
static (inside,outside) tcp interface ssh 192.168.1.99 ssh netmask 255.255.255.255
static (inside,outside) tcp interface 5900 192.168.1.100 5900 netmask 255.255.255.255
static (inside,outside) tcp interface 5901 192.168.1.100 5901 netmask 255.255.255.255
static (inside,outside) tcp interface 5902 192.168.1.100 5902 netmask 255.255.255.255
static (inside,outside) tcp interface 5903 192.168.1.100 5903 netmask 255.255.255.255
static (inside,outside) tcp interface 5432 192.168.1.99 5432 netmask 255.255.255.255
access-group inside_access_in in interface inside
access-group 103 in interface outside
route outside 0.0.0.0 0.0.0.0 83.100.200.9 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.1.0 255.255.255.0 inside
http 192.168.1.0 255.255.255.0 inside
http 192.168.2.0 255.255.255.0 zarz
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
no crypto isakmp nat-traversal
telnet timeout 5
ssh timeout 5
console timeout 0
management-access inside
dhcpd ping_timeout 750
dhcpd auto_config outside
!
dhcpd address 192.168.1.2-192.168.1.98 inside
dhcpd dns 1.2.3.4 206..4.5.6 interface inside
dhcpd enable inside
!
dhcpd dns 1.2.3.4 206.4.5.6 interface outside
!

no threat-detection basic-threat
no threat-detection statistics access-list
group-policy GroupPolicy1 internal
username admin password OEUgP/2bvWvSS4qQ encrypted privilege 15
!
class-map global-class
 match any
class-map inspection_default
 match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum 512
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny  
  inspect sunrpc
  inspect xdmcp
  inspect sip  
  inspect netbios
  inspect tftp
 class global-class
  inspect ftp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:5b412c994e86b8627b5695467b99fd98
: end




Start Free Trial