Help for a Cisco ASA5510 newbie

rayleask1 · ‎11-08-2007

Hi, we have just installed a new 5510 and need a few pointers for rule and nat creation. Incoming email and DNS traffic come in from mutiple external email servers expecting both our email and dns servers to be on the ip address of our external interface. I need to take this traffic and forward it onto the two relevant boxes with the correct ports. What access and nat rules do i need to setup using ASDM? My Cisco course isnt for another month.

Thnaks, Ray

Jon Marshall · ‎11-08-2007

Hi Ray

Internal DNS server = 192.168.5.1

Internal Mail server = 192.168.5.10

External interface address = 212.10.10.1

static (inside,outside) tcp interface 25 192.168.5.10 25

static (inside,outside) tcp interface 53 192.168.5.1 53

access-list inbound permit tcp any host 212.10.10.1 eq 25

access-list inbound permit udp any host 212.10.10.1 eq 53

access-list inbound permit tcp any host 212.10.10.1 eq 53

access-group inbound in interface outside

HTH

Jon

rayleask1 · ‎11-09-2007

Cheers Jon. I will give that a go later.

Thanks, Ray