cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
514
Views
0
Helpful
1
Replies

NAT configuration.

forman102
Level 1
Level 1

Hello,

I need to NAT my internal server and allow traffic to 2 vendor servers on ports 443 and 80. I'm using ASA 5510. Can you please confirm that the following lines are the way to configure this scenario:

my internal server's IP: 10.10.10.10/16

public IP for NAT: 192.168.10.10/24

Vendors servers:

200.10.10.10/24

200.10.10.11/24

asa(config)# static(inside,outisde) tcp 192.168.10.10 443 10.10.10.10 443 netmask 255.255.255.255

asa(config)# static(inside,outisde) tcp 192.168.10.10 80 10.10.10.10 80 netmask 255.255.255.255

then I would have to modify my ACL to allow traffic between vendor and my server:

ASA(config)#access-list out extended permit tcp host 200.10.10.10 host 192.168.10.10 eq 443

ASA(config)#access-list out extended permit tcp host 200.10.10.10 host 192.168.10.10 eq 80

ASA(config)#access-list out extended permit tcp host 200.10.10.11 host 192.168.10.10 eq 443

ASA(config)#access-list out extended permit tcp host 200.10.10.11 host 192.168.10.10 eq 80

Is there a better way to do it?

thanks

forman

1 Accepted Solution

Accepted Solutions

Maykol Rojas
Cisco Employee
Cisco Employee

Hello Forman,

That would be the way to do it.

Cheers

Mike

Mike

View solution in original post

1 Reply 1

Maykol Rojas
Cisco Employee
Cisco Employee

Hello Forman,

That would be the way to do it.

Cheers

Mike

Mike
Review Cisco Networking for a $25 gift card