topic Re: static nat and port in Network Security

static nat and port

bluesea2010 — Fri, 01 May 2020 12:53:43 GMT

Hi,

object-group service DM_INLINE_SERVICE_1
service-object object 8069

access-list Outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any object Obj-192.168.100.100
object network 192.168.100.100
nat (DMZ,Outside) static 1.1.1.1

users are accessing using https://1.1.1.1:8069

I need to change the port from 8069 to 8080 without changing in the server .

How can I change it in the NAT

Thanks

Re: static nat and port

Sheraz.Salim — Fri, 01 May 2020 16:09:22 GMT

Just change the port number that it.

object service 8080
 service tcp destin eq 8080
!
object-group service DM_INLINE_SERVICE_1
service-object object 8080
!
object network 192.168.100.100
nat (DMZ,Outside) static 1.1.1.1
!
access-list Outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any object Obj-192.168.100.100

Re: static nat and port

bluesea2010 — Fri, 01 May 2020 21:27:28 GMT

Hi,
I am sorry , I could not convey my requirement .
The port is on the server is 8069 , I want to give port 8080 to the public instead of 8069
I mean firewall should translate from 8080 to 8069
Thanks

Re: static nat and port

Sheraz.Salim — Sat, 02 May 2020 11:33:22 GMT

sorry i am confused what you asking. you saying user coming from outside interface with any random ip address with random port need to hit server 8089 but before hitting its need to change the port 8089 to port 8080?

Re: static nat and port

bluesea2010 — Sat, 02 May 2020 16:56:40 GMT

Hi,
I 'll make it simple , like static nat , I want to translate the port also .
the user connect to the port 8080 and asa would translate to 8069
Thanks

Re: static nat and port

Sheraz.Salim — Sat, 02 May 2020 19:26:11 GMT

object network 192.168.100.100
nat (DMZ,Outside) static 1.1.1.1 service tcp 8080 8069
!
access-list Outside_access_in extended permit tcp any object Obj-192.168.100.100 eq 8080

now when end user open a url 1.1.1.1:8080 asa will do the translation to port 8069.