Hi
Here is an example to do the nat statement for dmz1. As nat ports are not contiguous, you'll need to create 2 objects and apply the nat statement. Also the acl needed on your outside interface.
As per example I've done 2 different ace, 1 per port. You can also create a port object and then have only 1 ace referring to that port object for this specific host.
object network dmz1-8080
host 192.168.46.15
nat (dmz1,outside) static 172.16.1.1 service tcp 8080 8080
!
object network dmz1-https
host 192.168.46.15
nat (dmz1,outside) static 172.16.1.1 service tcp 443 443
!
access-list outside_access_in extended permit tcp any object dmz1-https eq https
!
access-list outside_access_in extended permit tcp any object dmz1-8080 eq 8080
For dmz4, as ports are contiguous we can do in another way:
object network dmz4-srv
host 192.168.35.2
!
object service Obj-Ports
service tcp destination range 7909 7911
!
nat (outside,inside) source static any any destination static interface dmz4-srv service Obj-Ports Obj-Ports
!
access-list outside_access_in extended permit tcp any object dmz4-srv range 7909 7911
I don't have your config but nat order is important to not overlap things.
Sorry for my paging, I'm using my mobile phone to answer your question.
Thanks
PS: Please don't forget to rate and mark as correct answer if this answered your question
Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question
