port mapping on asa 5505

[TY08]

hi guys,

how do you enabled multiple port mapping on asa 5505? i want to use 1 static ip address for rdp connection for 15 users, and the port will start from 3390 to 3340. 

how can i accomplish this?

thanks...

[varrao · Accepted solution]

Hi,

you can accomplish it by the following:

static (inside,outside) tcp 1.1.1.1 3389 10.1.1.1 3389

static (inside,outside) tcp 1.1.1.1 3390 10.1.1.2 3390

access-list outside_access_in permit tcp any host 1.1.1.1 range 3389 3340

access-list outside_access_in in interface outside

also refer the below doc:

http://www.cisco.com/en/US/customer/products/hw/vpndevc/ps2030/products_tech_note09186a00804708b4.shtml

Hope this helps.

Thanks,

Varun

[TY08]

thanks for the reply. on the one to one mapping, tcp interface command has to be used instead of the ip command, and specify the original port.

static (inside,outside) tcp interface 3390 10.1.1.1 3389 netmask 255.255.255.255

[varrao]

Hi,

Yes the command is correct.

Thanks,

Varun

[Jay Johnston · Accepted solution]

For version 8.3 and later, see this config example:

https://supportforums.cisco.com/docs/DOC-16848