topic Port forwarding in Network Security

Port forwarding

burleyman — Tue, 12 Mar 2019 04:55:37 GMT

I have an ASA 5510 running 8.4(4)1 here is what I am trying to accomplish.

Setup.....

internet --> ASA ---> core switch and connected to core switch is a Meraki MX60 that will be a VPN concentrator for some Meraki Z1's

What I need to setup is port forwarding that will take traffic from the outside on port 25000 and send it to the Meraki MX 60 that has an IP address of 10.2.3.134.

Let's say the outside interface of the ASA is 208.208.208.194

Here is what I think I need to do......

object network host Meraki_MX_VPN
nat (inside, outside) dynamic 10.2.3.134 service tcp 25000

access-list outside_access permit tcp any host Meraki_MX_VPN eq 25000

access-group outside_access interface outside

Would this accomplish what I need?

Mike

Well looks like what I

burleyman — Tue, 14 Oct 2014 18:43:01 GMT

Well looks like what I thought would work is wrong.

need help with what I need to do.

Mike

It would beobject network

david-swope — Tue, 14 Oct 2014 18:56:47 GMT

Some of your syntax was off but you want to use a public IP to present the Meraki to the Internet to allow access in, then NAT from that outside to the internal IP

object network Meraki_MX_VPN_ExtIP

host x.x.x.x

object network Meraki_MX_VPN

host 10.2.3.134

nat (inside,outside) static Meraki_MX_VPN_ExtIP service tcp 25000 25000

access-list outside_access_in permit tcp any object Meraki_MX_VPN eq 25000

access-group outside_access_in in interface outside