Accessing several ports on inside server from internet

[estebanvojacek]

Hello Guys

I am not able to find information on how to nat more than one port to the internet for an internal server, this is what I wnat to achieve:

Inside Mail Server: 192.168.0.5

Mail Ports (should be opened to internet): 25,80,443

IP that the users should be pointing at (outside interface): 200.80.100.100

Cisco ASA 4454x Version 9.6 soft

Basically what I need to do is to open these 3 ports to the internet to anyone (public), these users shoudl reach my mail server through these ports.
Should I use object-groups?
Everything I find on the internet is to perform nat ot PAT for only one port.

Can you help me?

Thank you guys.

Steve.

[Marius Gunnerud]

I am assuming you mean 5545 and not 4454? 

The ASA does not support the use of object-groups in NAT statements.  I believe this is because object-groups don't support source or destination port configuration.  So only regular objects can be used and these only support one entry per object.

In short, you have to configure one nat rule per port.

--

Please remember to select a correct answer and rate helpful pos

[Ajay Saini]

** I am assuming that the outside public ip address is your ASA external ip address. 

object network obj-mailserver
host 192.168.0.5

object network obj-mailserver
nat (inside,outside) static interface service tcp smtp smtp

object network obj-mailserver2
host 192.168.0.5

object network obj-mailserver
nat (inside,outside) static interface service tcp 80 80

object network obj-mailserver3
host 192.168.0.5

object network obj-mailserver
nat (inside,outside) static interface service tcp 443 443

Please check above sample config. Just add as per your interface names and add access-list for real ip address and port numbers:

Let me know if there are any questions.

-

AJ