Outside to inside NAT

[memossanda]

Dears,

I have one public IP address that i use to surf the internet with for all of my LAN.

I need to configure this one public IP to be used for accessing my cameras that are located on the inside DMZ from the outside as well as continuing with the inside DMZ to surf the internet, Is this possible or do i need another public IP?

Thanx in advance

[rizwanr74]

Hi Memossanda,

Yes it is possible.

What is your security device and IOS version you are running on it?

On which interface your Camera is connected?

thanks

[memossanda]

I have a cisco ASA 5510 with ios version of 9.1.

The cameras are connected to a DMZ, and to access them from the outside over the internet on port 80.

[rizwanr74 · Accepted solution]

Lets says your dmz host is at 10.1.1.16 and your public IP address is: 2.2.2.2

I assume your outside interface facing interface is named outside.

Create ACL.

access-list outside-in extended permit tcp any host 10.1.1.16 eq 80

access-group outside-in in interface outside

object network obj-10.1.1.16
 host 10.1.1.16
 nat (dmz,outside) static 2.2.2.2 service tcp 80 www

Let me know, if this helps.

Thanks

Rizwan Rafeek