03-16-2017 03:46 AM - edited 03-12-2019 02:04 AM
Hi I am trying to do nat using service groups, I have below objects and wondering how to put them together what I have is ASA 5515
network object aaa
host 1.1.1.1
object-group server bbb_dst
service-object tcp destination eq www
service-object tcp destination eq http
object-group server bbb_sour
service-object tcp source eq www
service-object tcp source eq http
network object aaa
nat (inside,outside) xxxxxxxxxxxx bbb_dst bbb_sour
how do I go about above and can this be done
Thanks and Regards
Solved! Go to Solution.
04-02-2017 01:12 PM
Specify service with the desired protocol keyword and the real and mapped ports. You can enter either a port number or a well-known port name (such as http)
object network aaa-01
nat (inside,outside) static MAPPED_IPS service tcp 80 8080
(Network Object NAT only.) You can only define a single NAT rule for a given object; if you want to configure multiple NAT rules for an object, you need to create multiple objects with different names that specify the same IP address. For example, object network obj-10.10.10.1-01, object network obj-10.10.10.1-02, and so on.
object network aaa-02
nat (inside,outside) static MAPPED_IPS service tcp 81 8081
03-24-2017 02:19 AM
Anyone out there? :(
03-27-2017 12:17 AM
Hi, I tried google and found some document but things do not go as per the instructions!!!!!!!!!!!!!!!!!!!!!11111
04-02-2017 12:43 PM
Please edit and move your topic to the proper category:
Security > Firewalling
then you will have the chance for readers and answers.
04-02-2017 11:32 PM
Hi I am new to this, thank you, will move this
Thank and best Regards
04-02-2017 11:36 PM
Hi Peter, some one has done the needful, Thanks you
04-02-2017 01:12 PM
Specify service with the desired protocol keyword and the real and mapped ports. You can enter either a port number or a well-known port name (such as http)
object network aaa-01
nat (inside,outside) static MAPPED_IPS service tcp 80 8080
(Network Object NAT only.) You can only define a single NAT rule for a given object; if you want to configure multiple NAT rules for an object, you need to create multiple objects with different names that specify the same IP address. For example, object network obj-10.10.10.1-01, object network obj-10.10.10.1-02, and so on.
object network aaa-02
nat (inside,outside) static MAPPED_IPS service tcp 81 8081
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide