Help with NAT (public IP to internal)

[Andy White]

Hello,

Why does this NAT not work, I want to briefly allow a remote desktop to be opened up over the internet via our ASA to an internal IP off the inside interface:

object network 172.29.140.37
nat (inside,outside) static x.x.x.x

outside_access_in extended permit tcp any host 172.29.140.37 eq 3389 log disable

Thanks

[Philip D'Ath]

That looks like it should work to me.  Are you sure Windows Firewall is configure to allow RDP from remote subnets?

[Andy White]

Ah in the end I tried a different guest network and it worked.  I had a laptop tethered to a mobile (so of 3G/4G) to test and it didn't work, went to a coffee shop to test and it worked.

Spent ages re-checking my config and it was fine all along :)

Thanks for taking a look though.