Forward 8080 to 80 with ASDM Port Forwarding

[dbuckley77]

We have server webinterface that is being natted.  If I do a static 1-1 nat with not pat and a rule to allow all tcp it works but when I try to forward 8080 from the outside to 80 on the inside it no longer works.

[Philip D'Ath]

You don't want to have overlapping NAT if you can have it, so you should either user 1:1 to PAT.

So if you are doing 1:1 and it works, then the server must be listening on 8080 if it works, because the firewall will not change the ports.

My guess, the internal web server is listening on 8080 and not 80.  It breaks when you NAT 8080 to 80 because the web server is not listening on 80.

[Akshay Rastogi]

Hi,

- Which ASA version you are running?

- Could you please share the nat statement you get after you push the configuration from ASDM.

If version is pre8.3 then it first port would be the mapped one and second is th real one.

If version is post 8.3 then it s first port would be real port and second is the mapped one.

Hope it helps.

Regards,

Akshay Rastogi

Remember to rate helpful posts.