topic NAT Statement in Network Security

NAT Statement

Suresh Varghese — Mon, 11 Mar 2019 20:35:28 GMT

Hi,

I would like to know how to NAT multiple webservers to one public IP on port based

i.e. i have 2 internet facing webservers (a.b.c.d & e.f.g.h) on the DMZ zone but have only one public IP (x.x.x.x). I want to access both these servers on the same public IP from the outside.

Can anyone help ?

Thanks

Re: NAT Statement

varrao — Thu, 19 May 2011 14:29:53 GMT

Hi Suresh,

You can use static port forwarding for it, whihc would be something like:

static (dmz,outside) tcp x.x.x.x 80 a.b.c.d 80

static (dmz,outside) tcp x.x.x.x 21 e.f.g.h 21

This would do the trick for you.

This just utilizes the specific port on PUblic IP rather tahn the whole IP address.

Please also let me know the version of ASA softawre, because this would be different from 8.3 onwards.

Hope this helps.

P.S.- rate posts which are helpful.

Thanks,

Varun

Re: NAT Statement

varrao — Thu, 19 May 2011 16:51:29 GMT

This is what you all need:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708b4.shtml

Thanks,

Varun