Forward external to internal

MatsHellman — Tue, 12 Mar 2019 06:55:02 GMT

Hi all,

I very rarely touch the configuration on my Cisco ASA5505 and need to create a rule for forwarding specific traffic from the external interface to an internal host.

External Interface <--> 10.10.10.10 and the traffic will be UDP 6881,6882.

I've been looking at NAT's but most of them use a secondary IP on the external interface which I do not have, I only have on DHCP adress on the external interface.

Any help here would be extremely welcome.

//Mats

Hi Mats,

Shivapramod M — Thu, 19 Nov 2015 14:35:00 GMT

Hi Mats,

You can create the NAT like below if you are running the version 8.3 or above.

object network obj-10.10.10.10
host 10.10.10.10
nat (inside,outside) static interface service udp <real port> <mapped port>

In addtion to this Create an access list permitting the real IP and real port on outside

P.S. Please rate helpful posts.

Thanks,

Shivapramod M

topic Forward external to internal in Network Security

Forward external to internal

Hi Mats,