cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
926
Views
4
Helpful
4
Replies

Problem on port forwarding on ASA 5512x?

rechard_hk
Level 1
Level 1

Dear All,

I would like to ask you that currently i have two public ip add
and i would like to use port forwoarding. as below i use one public ip add
and other one i don't know how to configure.

Public ip add 203.10.1.1
----
access-list outside_acl_in extended permit tcp any host 192.168.1.2 eq www

object network www-10
nat (inside,outside) static interface service tcp www www

so i would like to add other public 203.10.1.2 to 192.168.1.3 port www

Best Regards,

rechard

4 Replies 4

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Rechard,

Same thing, just use the IP address instead of the "interface" keyword.

static (inside,outside) tcp 203.10.1.2 80 192.168.1.3 80

access-list outside_acl permit tcp any host 203.10.1.2 eq 80

Check my blog at http:laguiadelnetworking.com for further information.

Cheers,

Julio Carvajal Segura

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Dear Juilo,

Is it working on ASA 5512 V.9.1.1?

Currently i'm using 

object network www-10
host 192.168.1.2

access-list outside_acl_in extended permit tcp any host 192.168.1.2 eq www

object network www-10
nat (inside,outside) static interface service tcp www www

Best Regards,

Rechard

Hey Rechard

Do this

object network www-10

host 192.168.1.3

nat (inside,outside) static 203.10.1.2 service tcp www www

Thanks

Vishaw

Hello,

You showed  us the configuration on version 8.2 or lower but wanted on 8.3 or higher... lol.

OK, that being said

object network Inside_Server_2

host 192.168.1.3

Object network Outside_Server_2

host 203.10.1.2

nat (inside,outside) 1 source static Inside_Server_2 Outside_Server_2

access-list outside_acl_in permit tcp any host 192.168.1.3 eq 80

Remember to rate all of the answers

Check my blog at http:laguiadelnetworking.com  and subscribe so you can get daily information about networking.

Cheers,

Julio Carvajal Segura

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card