Port range on Static NAT

Unanswered Question
Apr 23rd, 2008
User Badges:


I have a VoIP system which resides behind an ASA5505. I need to configure port forwarding of ports 10000 to 20000 to my VoIP system. The only way I can achieve this is by creating a static NAT of all IP traffic then restricting the ports by an Access Rule. It is impossible to create a static NAT rule for every port. Is there an alternate way of achieving this result? I am asking so because I cannot publish a separate service to a different internal IP which is not the VoIP system.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
smohanasundaram Tue, 04/29/2008 - 00:22
User Badges:


add a static NAT to your VOIP system.

static (inside,outside) "public ip" IP) netmask

it may be useful

Thanks and Regards

S.Mohana sundaram

INDSYS Technologies

aseychell Tue, 04/29/2008 - 00:50
User Badges:


Thanks for your reply. This is what I am currently doing, but having only one public IP, with this I cannot use other ports on the same Public IP redirected to another internal IP. Say I want UDP 10000 - 20000 to go to and TCP port 80 to and TCP port 25 to

With the Static NAT you suggested, this is impossible to achieve no?




This Discussion