topic Thanks Jon, I'll give this a in Network Security

9.2(4) Port redirection

0rsnaric — Tue, 12 Mar 2019 05:46:24 GMT

On an ASA 5510 running version 8 something, this worked:

static (inside,outside) tcp <OUTSIDE IP ADDRESS> www <INSIDE IP ADDRESS> 8080 netmask 255.255.255.255

Allowing me to redirect incoming port 80 traffic to to port 8080.

What is the correct method for doing this with the wonderful new 9.2(4) version running on an ASA 5515-X?

Thanks.

There are a couple of ways to

Jon Marshall — Tue, 14 Apr 2015 18:05:02 GMT

There are a couple of ways to do it with post 8.3 NAT and it's to do with NAT ordering which is very different now.

This is the recommended way -

object network <NAME>
host <INSIDE IP ADDRESS>
nat (inside,outside) static <OUTSIDE IP ADDRESS> service tcp 8080 80

but be aware this may or may not work depending on what other NAT rules you have and in what section they are, usually to do with where your general dynamic NAT for internet access is.

See this document which explains the ordering and the reasons to use certain sections for specific NAT rules -

https://supportforums.cisco.com/document/132066/asa-nat-83-nat-operation-and-configuration-format-cli

Edit - if it's still not clear then by all means come back.

Jon

Thanks Jon, I'll give this a

0rsnaric — Wed, 15 Apr 2015 16:35:25 GMT

Thanks Jon, I'll give this a try.