Cisco ASA 5520 NAT/PAT for inbound ports

[jthombs1016]

I am  trying  to PAT some  ports  from the Internet to  two  Internal address  addresses  but I am not having much success.

 Below  is  Rules have added to ASA

My Outside2  Interface x.x.x.202  and my  external IP server is x.x.x.203  My internal server is  10.96.1.101 and .5

Will the below statement work ?

NAT
static (outside2,inside) tcp 10.96.1.5 https x.x.x.203 8181 netmask 255.255.255.255
static (outside2,inside) tcp 10.96.1.101 3389 x.x.x.203 28111 netmask 255.255.255.255
static (outside2,inside) tcp 10.96.1.101 10050 x1x.x.203 10050 netmask 255.255.255.255
Rules
access-list inside_in extended permit tcp any eq 28111 host 10.96.1.101 eq 3389 log
access-list inside_in extended permit tcp any eq 10050 host 10.96.1.101 eq 10050 log
access-list inside_in extended permit tcp any eq 8181 host 10.96.1.5 eq https log

[Collin Clark]

Try swapping your interfaces-

static (inside,outside2) tcp x.x.x.203 8181 10.96.1.5 443 netmask 255.255.255.255

Your ACL's should have the mapped IP, not the real IP in them. You should not specify a source port either (unless you know that it will always use that port).

access-list inside_in extended permit tcp any host x.x.x.203 eq 443 log

HTH

[jthombs1016]

Thanks  Swapped around and changed the ACL  its still not working.  packet tracer  give an error 

at the last  item 

[Collin Clark]

Do you already have an 'outside' interface that has your default gateway and this is a backup connection?

[jthombs1016]

Outside is  disabled

Outside2 is the gateway

[Collin Clark · Accepted solution]

Can you run another packet tracer, expand all the steps and post it?

[jthombs1016]

uploaded

[Collin Clark · Accepted solution]

Your IP's are backwards in the NAT statement. Mapped IP comes first.

nat (inside,outside2) tcp x.x.x.3 28111 10.96.1.101 443

[jthombs1016]

should I use the static command or NAT command ?

[jthombs1016]

Sorry clicked the wrong button.

would this be the issue, I am nating everything  outbound  on a global net ?

global (outside2) 20 interface

[jthombs1016]

Also seeing this error is  "cisco asa no valid adjacency"