NAT address inbound and outbound

ohareka70 — Fri, 21 Feb 2020 16:23:43 GMT

Hello,

I have a new server on my dmz which needs external access to a public IP address outbound over tcp/2001

I also need external users to be able to hit this server externally inbound over https

I have setup an external dns called server.mydomain.com using an external static NAT and this worked ok

i used the same NAT to get outbound access to the public ip and have firewall rules in and routing for this but it wont connect. Do i need to use a different NAT address and should the NAT address be hide/static nat

Re: NAT address inbound and outbound

Rob Ingram — Wed, 24 Oct 2018 18:22:51 GMT

Hi,
You'll need to configure a static nat for the server in the dmz and then the appropriate access-list. I am assuming you are using ASA 9.x
E.g.

object network DMZ-SRV
host 192.168.10.5
nat (inside,outside) static 1.1.1.10

access-list OUTSIDE_IN permit tcp any host 192.168.10.5 eq 443
access-list IN_OUTSIDE permit tcp host 192.168.10.5 any eq 2001

HTH

topic NAT address inbound and outbound in Network Security

NAT address inbound and outbound

Re: NAT address inbound and outbound