topic ASA v8.3 - Port Forwarding multiple Ports in Network Security

ASA v8.3 - Port Forwarding multiple Ports

jnrnetworks — Mon, 11 Mar 2019 19:28:44 GMT

I'm running an ASA v8.3 and need to forward multiple ports coming inbound on one external IP to one internal IP. I know how to do this in the old version but I'm all confused with the new version. Can someone help me out here?

Sample Public IP: 209.104.10.98

Internal IP: 172.16.5.15

External Port 80 maps to internal port 8080

External Port 443 maps to internal port 4443

External Port 5067 maps to internal port 5067

I can do the NAT for one of the port forwards but it won't let me define multiple forwards and the straight through configuration...I'm at a bit of a loss.

Thanks

Re: ASA v8.3 - Port Forwarding multiple Ports

Jennifer Halim — Thu, 30 Dec 2010 00:22:38 GMT

Here you go:

object network obj-209.104.10.98

host 209.104.10.98

object network obj-172.16.5.15

host 172.16.5.15

object service tcp-80

service tcp source eq 80

object service tcp-8080

service tcp source eq 8080

object service tcp-443

service tcp source eq 443

object service tcp-4443

service tcp source eq 4443

object service tcp-5067

service tcp source eq 5067

nat (inside,outside) source static obj-172.16.5.15 obj-209.104.10.98 service tcp-8080 tcp-80

nat (inside,outside) source static obj-172.16.5.15 obj-209.104.10.98 service tcp-4443 tcp-443

nat (inside,outside) source static obj-172.16.5.15 obj-209.104.10.98 service tcp-5067 tcp-5067

Hope that helps.

Re: ASA v8.3 - Port Forwarding multiple Ports

jnrnetworks — Thu, 30 Dec 2010 00:55:48 GMT

Thank you. That worked wonderfully!

Re: ASA v8.3 - Port Forwarding multiple Ports

Jennifer Halim — Thu, 30 Dec 2010 06:19:12 GMT

Perfect, thanks for your update.

Please kindly mark the post as answered so others can share the knowledge. Thank you.

Re: ASA v8.3 - Port Forwarding multiple Ports

jnrnetworks — Thu, 30 Dec 2010 15:15:18 GMT

I would be happy to but I cannot find anything that indicates that I can mark the post as answered. Can you point me to where I'd do that?

Re: ASA v8.3 - Port Forwarding multiple Ports

Kureli Sankar — Thu, 30 Dec 2010 23:04:28 GMT

From your other post

https://supportforums.cisco.com/docs/DOC-6022#I_posted_a_question_how_do_I_mark_a_reply_as_Correct_Answer

Copy and paste the entire URL on the browser.

-KS

Re: ASA v8.3 - Port Forwarding multiple Ports

jnrnetworks — Thu, 30 Dec 2010 23:11:44 GMT

I must be completely retarded as I didn't see that before. Thank you!

Re: ASA v8.3 - Port Forwarding multiple Ports

fmcs — Fri, 23 Mar 2018 21:43:12 GMT

Is it possible to accomplish this but, same public ip, but serving multiple services and pointing internaly to diferent ips ?

Example:

201.12.12.12 ip port 80 points to 10.10.10.1

201.12.12.12 ip port 21 points to 10.10.10.2

201.12.12.12 ip port 22 points to 10.10.10.3

Thank you.