Port mapping for two public IP

[rohandast]

We have ASA 5505. Is it possible to Port map two public IP from ADSL connection to Internal network. We already have one IP mapped.

[Kureli Sankar]

Yes it is possible.

[rohandast]

Would be pleased if you could pass me any reference link to know how to map the IP to Port

[Kureli Sankar]

example:

let us say your public IPs are 10.10.10.1 and 10.10.10.2

Your inside or dmz webserver address is 192.168.1.1 and 192.168.1.2

You can map tcp port 80 between 10.10.10.1 and 192.168.1.1

and tcp 3389 between 10.10.10.2 and 192.168.1.2

static (i,o) tcp 10.10.10.1 80 192.168.1.1 80

static (i,o) tcp 10.10.10.2 3389 192.168.1.2 3389

Allow permission via access-list on the outside interface to allow port 80 to 10.10.10.1 and 3389 to 10.10.10.2

Here is the config. guide for static pat:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/cfgnat.html#wp1043281

[rohandast]

Will this configuration may be applicable to ASA 5505 model. Please confirm

[Panos Kampanakis]

Yes kusankar's example can be used on a 5505.

PK

[rohandast]

Can any one help to let me know how to conifgure the access-list on the below conditions

Allow permission via access-list on the outside interface to allow port 80 to 10.10.10.1 and 3389 to 10.10.10.2

[Kureli Sankar]

access-list acl-out permit tcp any host 10.10.10.1 eq 80

access-list acl-out permit tcp any host 10.10.10.2 eq 3389

access-g access-l acl-out in int outside

provided outside is the name of your outside interface.