ASA 8.4 static NAT statements.

[forman102]

Hello,

I have 2 servers with static PAT configuration in pre 8.3 ASA:

Server1 - 10.6.1.10 - PAT to 66.66.66.66 for SMTP

Server2 - 10.6.1.20 - PAT to 66.66.66.66 for IMAP4 and http/https

Pub address - 66.66.66.66

old config:

1. static (inside,outside) tcp 66.66.66.66 smtp 10.6.1.10 smtp netmask 255.255.255.255

2. static (inside,outside) tcp 66.66.66.66 www 10.6.1.20 www netmask 255.255.255.255

3. static (inside,outside) tcp 66.66.66.66 https 10.6.1.20 https netmask 255.255.255.255

4. static (inside,outside) tcp 66.66.66.66 imap4 10.6.1.20 imap4 netmask 255.255.255.255

What is the proper way of migrating above config?

object network Server1                                     \\\\\  this takes care of PAT statement #1.

host 10.6.1.10

nat (inside,outside) static PAT service tcp smtp smtp

object network Server2

host 10.6.1.20

object network PAT

host 66.66.66.66

How should I migrate statements 2,3 and 4?

Thank you.

forman

[Jouni Forss]

Hi,

Glad to hear everythings working

Feel free to rate any helpfull answers.

- Jouni

[forman102]

Hope this will save someone time...my original config from the 2nd post did NOT work. The one presented by Jouni works great thought! Thank you!

[Jouni Forss · Accepted solution]

Hi,

Glad to hear it worked out.

Please rate if you found the information helpfull

- Jouni