topic fwsm static nat/pat in Network Security

fwsm static nat/pat

Antonio_1_2 — Mon, 11 Mar 2019 18:50:30 GMT

Hello,

is it possible to have on FWSM configuration like this:

static (inside,outside) 10.0.0.0 10.0.0.0 netmask 255.255.255.0

static (inside,outside) tcp 10.0.0.100 80 10.0.0.100 8080 netmask 255.255.255.255

On outside interface i have clients in network 172.16.0.0/24 that need to connect to various servers in inside network 10.0.0.0/24 network

Particulary server 10.0.0.100 listens on port 8080, but clients connect to 10.0.0.100 port 80, so I need port translation.

I have this configuration on my firewall but it doesn't work.

Regards,

mirober2 — Tue, 05 Oct 2010 14:23:50 GMT

Hi Antonio,

Yes, it is possible. The FWSM should use the best match, which in your case would be the static PAT statement.

Do you also have access permitted in the inbound ACL on the outside interface? What do the syslogs show when a client tries to connect?

-Mike

Antonio_1_2 — Tue, 05 Oct 2010 15:19:10 GMT

Hi Mike,

thank you very much. I gave up too soon and didn't check access-list.

Regards,