ASA Configuration ..

[richard_steiner]

Hi Guys,

I am new to cisco ASA firewall and need help configuring one ..I am trying to NAT 2 LAN IP addresses to Public IP addresses on ports 25 and 443.

LAN   IP	PUBLIC   IP	PORT
192.168.0.7	41.222.40.62	25, 443
192.168.0.8	41.222.40.37	25, 443

Attached is a copy of my config, I will greatly appreciate corrections where applicable.

Cheers,

Richard

[Vibhor Amrodia]

Hi,

NAT statements:-

static (dmz,outside) tcp 41.222.40.37 https 192.168.0.8 https netmask 255.255.255.255
static (dmz,outside) tcp interface https 192.168.0.7 https netmask 255.255.255.255
static (dmz,outside) tcp 41.222.40.37 smtp 192.168.0.8 smtp netmask 255.255.255.255
static (dmz,outside) tcp interface smtp 192.168.0.7 smtp netmask 255.255.255.255

These rules look good.

ACL:-

access-list Out-Dmz permit tcp any interface outside eq 443

access-list Out-Dmz permit tcp any interface outside eq 25

access-list Out-Dmz permit tcp any host 41.222.40.37  eq 443

access-list Out-Dmz permit tcp any host 41.222.40.37  eq 25

access-group Out-Dmz in interface outside

Thanks and Regards,

Vibhor Amrodia

[richard_steiner]

Hi Vibhor,

Are you advising that I update my access list with the above?

Thank you so much for your time.

~Richard