ASA5515 v8.6(1)2 NAT config problems

[pwmsonpbs]

This new NAT is running me bonkers.

I need to set up a public email server on the inside interface

I also need t allow Outlook Web Access inbound

I have tried a couple of configs to no avail - the packet tracer stops at my NAT statement.

object network OWA-PRI

 host 10.172.1.5
 nat (inside,outside) static interface service tcp https https

access-list outside_access_in extended permit tcp any object OWA-PRI eq https

object network Exhange-PUB
 host 24.25.26.27
access-list outside_access_in extended permit tcp any object Exchange-PRI eq smtp

object network Exchange-PRI
 host 10.172.1.7
 nat (inside,outside) static Exchange-PUB service tcp smtp smtp

What am I doing wrong here?

Thanks,

Phil

 

[pwmsonpbs]

This looks better - no?

object network Exhange-PUB
 host 24.25.26.27
access-list outside_access_in extended permit tcp any object Exchange-PRI eq smtp

object network Exchange-PRI
 host 10.172.1.7
 nat (inside,outside) static Exchange-PUB

[Jigar Dave]

Try This

object network obj-10.172.1.5
host 10.172.1.5
nat (inside,outside) static 24.25.26.27

access-list outside_access_in extended permit tcp any host 10.172.1.5 eq smtp
access-list from_inside2outside extended permit ip host 10.172.1.5 any