09-10-2019 12:05 PM - edited 02-21-2020 09:28 AM
the request is when the traffic hit the public IP on port 222, i need to redirect to a internal server on port 22.
mu configuration is like this:
object network FTP-Access
nat (dmz2,outside) static FTP-SVR-Public service tcp ssh 222
access-list global_access extended permit tcp any object FTP-Access eq 222
access-group global_access global
but it doesn't work.
please help.
thanks
09-10-2019 12:13 PM
09-10-2019 12:21 PM
i tried both the ports in ACL, but didn't work, even no traffic hit the rule.
09-10-2019 12:25 PM
09-10-2019 12:46 PM
the static nat is above the dynamic nat, we using different public IP for different port forwarding, and the PAT still go through the main public IP.
object network FTP-Access
nat (dmz2,outside) static FTP-SVR-Public service tcp ssh 222
!
nat (dmz2,outside) after-auto source dynamic any interface
09-10-2019 12:51 PM
09-10-2019 01:01 PM
the configuration has been changed , because we decided to use the same port 22 and it works fine.
thanks for you help.
i will set up a lab to do more tests for this issue.
thanks
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: