topic Port mapping for two public IP in Network Security

Port mapping for two public IP

rohandast — Mon, 11 Mar 2019 16:31:05 GMT

We have ASA 5505. Is it possible to Port map two public IP from ADSL connection to Internal network. We already have one IP mapped.

Kureli Sankar — Sun, 25 Oct 2009 16:59:14 GMT

Yes it is possible.

rohandast — Sun, 25 Oct 2009 17:56:32 GMT

Would be pleased if you could pass me any reference link to know how to map the IP to Port

Kureli Sankar — Sun, 25 Oct 2009 23:28:44 GMT

example:

let us say your public IPs are 10.10.10.1 and 10.10.10.2

Your inside or dmz webserver address is 192.168.1.1 and 192.168.1.2

You can map tcp port 80 between 10.10.10.1 and 192.168.1.1

and tcp 3389 between 10.10.10.2 and 192.168.1.2

static (i,o) tcp 10.10.10.1 80 192.168.1.1 80

static (i,o) tcp 10.10.10.2 3389 192.168.1.2 3389

Allow permission via access-list on the outside interface to allow port 80 to 10.10.10.1 and 3389 to 10.10.10.2

Here is the config. guide for static pat:

rohandast — Mon, 26 Oct 2009 20:25:26 GMT

Will this configuration may be applicable to ASA 5505 model. Please confirm

Panos Kampanakis — Mon, 26 Oct 2009 21:37:06 GMT

Yes kusankar's example can be used on a 5505.

rohandast — Fri, 30 Oct 2009 13:26:23 GMT

Can any one help to let me know how to conifgure the access-list on the below conditions

Allow permission via access-list on the outside interface to allow port 80 to 10.10.10.1 and 3389 to 10.10.10.2

Kureli Sankar — Fri, 30 Oct 2009 14:00:12 GMT

access-list acl-out permit tcp any host 10.10.10.1 eq 80

access-list acl-out permit tcp any host 10.10.10.2 eq 3389

access-g access-l acl-out in int outside

provided outside is the name of your outside interface.