ASA 5505 , Need to create public server for DVR cams (only 1 public IP)

[Reprovoid]

Hi.I'm trying via the ASDM to port forward http connections to a DVR for the purpose of viewing IP cams.I've tried via ASDM to create a public server but I'm not allowed to use my public IP address for the public Interface.I have only one public IP address available.Is there any way round this ?

  I would also like to know how I can enable NAT with PAT.I've tried setting the outside Interface for use with PAT but It keeps reverting to the setting for a range of external addresses.

I'm not really used to the ASA cli yet , I'm getting there.If there's a workaround via the CLI , I'll take that route.

Thank you.

[Daniele Giordano · Accepted solution]

Static NAT and port forwarding oh http 80 port via CLI:

interface GigabitEthernet0

nameif inside

ip address x.x.x.x

!

interface GigabitEthernet1

nameif outside

ip address x.x.x.x

static (inside,outside) tcp ASA_OUTSIDE_IP 80 DVR_IP 80 netmask 255.255.255.255

You must adjust your ACL also.

Enable PAT via CLI:

global (outside) 1 ASA_IP

nat (inside) 1 FIRST_LAN_IP_HOST 255.255.255.255

nat (inside) 1 SECOND_LAN_IP_HOST 255.255.255.255

etc.

Regards.

[Reprovoid]

Hi.Thank you!

  So on an ASA I have to configure PAT one internal address at a time ? Why have they set things up that way ?

[Daniele Giordano]

You can configure a network how explain in this example:

nat (inside) 1 192.168.1.0 255.255.255.0

Regards.

[Reprovoid]

Thanks for your help!