Static Policy

patricia20 · ‎04-09-2008

Hi,

I need to NAT an internal server and allow only certain ports open. After creating access-lists for these ports, should I still enable PAT (for the said ports) in the NAT configuration?

Thanks!

husycisco · ‎04-10-2008

Hi Patricia,

If you applied a one-to-one NAT like following

static (inside,outside) publicip localip netmask 255.255.255.255

Then you dont need to specify these ports individually.

But if you applied PAT, you should forward these ports as following

static (inside,outside) tcp interface portno localip portno netmask 255.255.255.255

Regards

patricia20 · ‎04-10-2008

Ok, thanks!