12-14-2010 07:18 AM - edited 03-11-2019 12:22 PM
Hello,
I need to NAT my internal server and allow traffic to 2 vendor servers on ports 443 and 80. I'm using ASA 5510. Can you please confirm that the following lines are the way to configure this scenario:
my internal server's IP: 10.10.10.10/16
public IP for NAT: 192.168.10.10/24
Vendors servers:
200.10.10.10/24
200.10.10.11/24
asa(config)# static(inside,outisde) tcp 192.168.10.10 443 10.10.10.10 443 netmask 255.255.255.255
asa(config)# static(inside,outisde) tcp 192.168.10.10 80 10.10.10.10 80 netmask 255.255.255.255
then I would have to modify my ACL to allow traffic between vendor and my server:
ASA(config)#access-list out extended permit tcp host 200.10.10.10 host 192.168.10.10 eq 443
ASA(config)#access-list out extended permit tcp host 200.10.10.10 host 192.168.10.10 eq 80
ASA(config)#access-list out extended permit tcp host 200.10.10.11 host 192.168.10.10 eq 443
ASA(config)#access-list out extended permit tcp host 200.10.10.11 host 192.168.10.10 eq 80
Is there a better way to do it?
thanks
forman
Solved! Go to Solution.
12-14-2010 07:23 AM
12-14-2010 07:23 AM
Hello Forman,
That would be the way to do it.
Cheers
Mike
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide