Help with rule/nat on ASA 5520

Unanswered Question
Feb 2nd, 2009


I hope this is possible.

I have a Cisco ASA 5520 with 2 DMZ's (on a Cisco 3750 trunked from the ASA).

One DMZ1 ( has our webservers and DMZ2 ( has a remote company with servers we use.

Now they have as me to prepare routing on my ASA so if they send data to port 703 is will instead go to port 703 which is our web vlan.

Not sure why they are sending to yet on 702, but I need to get our ASA to respond to this request on on 703.

Hope you can advise

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Collin Clark Mon, 02/02/2009 - 11:42

On DMZ2 you need to create NAT's. For example-

static (inside,dmz2) netmask

From their side they point the 192.168.200.x network out their firewall (to your IP of 10.10.x.y, your firewall IP) and the ASA will listen for requests and translate.

Hope that helps.


This Discussion