1-68
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Clientless SSL VPN
Configuring Port Forwarding
Following the configuration of a port forwarding list, assign the list to group policies or usernames, as
described in the next section.
Assigning a Port Forwarding List
You can add or edit a named list of TCP applications to associate with users or group policies for access
over clientless SSL VPN connections. For each group policy and username, you can configure clientless
SSL VPN to do one of the following:
• Start port forwarding access automatically upon user login.
Note These options are mutually exclusive for each group policy and username. Use only one.
Detailed Steps
These commands are available to each group policy and username. The configuration of each group
policy and username supports only one of these commands at a time, so when you enter one, the ASA
replaces the one present in the configuration of the group policy or username in question with the new
one, or in the case of the last command, simply removes the port-forward command from the group
policy or username configuration.
For details, go to the section that addresses the option you want to use.
Automating Port Forwarding
To start port forwarding automatically upon user login, enter the following commands:
Command Purpose
Step 1
port-forward auto-start list_name
OR
port-forward enable list_name
OR
port-forward disable
OR
no port-forward [auto-start list_name |
enable
list_name | disable]
Starts port forwarding automatically upon user
login.
Enables port forwarding upon user login.
Prevents port forwarding.
Removes a port-forward command from the group
policy or username configuration, which then
inherits the [no] port-forward command from the
default group-policy. The keywords following the
no port-forward command are optional, however,
they restrict the removal to the named port-forward
command.
To Next Page
Loading...
Need help?
General
