configure static PAT for port range

[fouad.jabri]

Hi,

could someone help with this:

we have an ASA 5510 version 8.2 and ASDM 6.4. we want to configure a static PAT for a range of TCP and UDP port. in the nat configuration window we have just to enter one port ( range are note accepted).

Thanks,

[Jouni Forss · Accepted solution]

Hi,

In software levels 8.2 and below the only option is to generate a separate configurations for each port. This is easiest achieved through the CLI and using some text editor to help generate the possibly large configurations.

On ASA software 8.3 and above (where NAT format was completely redone) you have the option to use a single "nat" command to configure Static PAT for a continuous range of ports.

So your option is to either generate a separate "static" configuration for each port or upgrade the software to a newer one to be able to do Static PAT for a range of ports.

Naturally the update involves rewriting the current NAT configuratins into a new format even though booting to newer software usually converts the configurations automatically but with varying success.

- Jouni

[fouad.jabri]

Thank you very much Jouni. I think the best solution is to upgrade the software.

[Jouni Forss]

Hi,

Ok, let me know if you need help with the new configuration format for for Static PAT

Please do remember to mark a reply as the correct answer if it answered your question.

- Jouni