topic asa 5510 ver 8.0(2) how to setup port forwarding to server on network in Network Security

asa 5510 ver 8.0(2) how to setup port forwarding to server on network

arcolino11 — Fri, 21 Feb 2020 12:39:42 GMT

hello all, I have a server on my network that I would like use through the asa. example inside ip address 192.168.2.x

port 20,333,555,999 outside ip address 216.235.122.x. I searched the internet and did not find commands for it. I would like to call

the server cars server. Please help.

asa 5510 ver 8.0(2) how to setup port forwarding to server on ne

varrao — Fri, 01 Jun 2012 20:15:18 GMT

Hi,

You would need this configuration:

static (inside,outside) tcp 216.235.122.x. 20 192.168.2.x 20

static (inside,outside) tcp 216.235.122.x. 333 192.168.2.x 333

static (inside,outside) tcp 216.235.122.x. 555 192.168.2.x 555

static (inside,outside) tcp 216.235.122.x. 999 192.168.2.x 999

and then open the same ports on the access-list that you have applied on the outside interface, eg:

access-list outside_access_in permit tcp any host 216.235.122.x eq 20

Here is a document for port forwarding on ASA:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708b4.shtml

Thanks,
Varun Rao
Security Team,
Cisco TAC

asa 5510 ver 8.0(2) how to setup port forwarding to server on ne

mikull.kiznozki — Sun, 03 Jun 2012 05:47:15 GMT

you could also create network objects for each of the servers and then write the nat rules/access rules just to make it easier for you to review the access rules/nat rules and change them when required.