Hi,
To determine the correct corresponding NAT0 configuration we would need to see the contents of the "access-list" named "Permit"
The other configurations are as follows
Static PAT (Port Forward)
object network TCP3397
host 192.168.0.22
nat (inside,outside) static interface service tcp 3397 3397
object network TCP900
host 192.168.0.22
nat (inside,outside) static interface service tcp 900 900
object network TCP1024
host 192.168.0.22
nat (inside,outside) static interface service tcp 1024 1024
Dynamic PAT
nat (inside,outside) after-auto source dynamic any interface
As I said before, for NAT0 we need to see the ACL configurations
Since the NAT is different you would have to allow the above traffic with the following ACL for example
access-list OUTSIDE-IN remark Allow Static PAT services
access-list OUTSIDE-IN permit tcp any object TCP3397 eq 3397
access-list OUTSIDE-IN permit tcp any object TCP900 eq 900
access-list OUTSIDE-IN permit tcp any object TCP1024eq 1024
access-group OUTSIDE-IN in interface outside
Naturally if you have an existing ACL attached to "outside" then add the rules to that ACL if needed.
Hope this helps
Please do remember to mark a reply as the correct answer if it answered your question.
Feel free to ask more if needed
- Jouni
