9.2(4) Port redirection

[0rsnaric]

On an ASA 5510 running version 8 something, this worked:

static (inside,outside) tcp <OUTSIDE IP ADDRESS> www <INSIDE IP ADDRESS> 8080 netmask 255.255.255.255

Allowing me to redirect incoming port 80 traffic to to port 8080.

What is the correct method for doing this with the wonderful new 9.2(4) version running on an ASA 5515-X?

Thanks.

[Jon Marshall]

There are a couple of ways to do it with post 8.3 NAT and it's to do with NAT ordering which is very different now.

This is the recommended way -

object network <NAME>
host <INSIDE IP ADDRESS>
nat (inside,outside) static <OUTSIDE IP ADDRESS> service tcp 8080 80

but be aware this may or may not work depending on what other NAT rules you have and in what section they are, usually to do with where your general dynamic NAT for internet access is.

See this document which explains the ordering and the reasons to use certain sections for specific NAT rules -  

https://supportforums.cisco.com/document/132066/asa-nat-83-nat-operation-and-configuration-format-cli

Edit - if it's still not clear then by all means come back.

Jon

[0rsnaric]

Thanks Jon, I'll give this a try.