ASA 5506 - Port Forwarding with dynamic DNS

[nicojk1985]

Hi everyone,

I'm in need of configuring port forwarding on an ASA 5506 device using an external dynamic DNS address. My configuration is like this:

Being this the scenario, I would need to access the machine 10.10.10.23 on port 22 by the address myDynamicDNS.com, from any machine in the WAN side. Furthermore, I would need to access any device on same port on 10.10.10.0.

Is there any guide that could help me in getting this setup by CLI?

Thanks in advance!

[balaji.bandi · Accepted solution]

here is the example guide for your configuration :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115904-asa-config-dmz-00.html

[mkazam001 · Accepted solution]

object network websvr-ext
 host 100.1.1.10
object network websvr-int
 host 10.10.10.23
nat (inside,outside) static websvr-ext service tcp 22 22
access-list outside-in ext permit tcp any object websvr-int eq 80

then need your dns name to matche that IP address/port

regards, mk

please rate if helpful od solved :)