Port range forwarding using ASA 5505

[edwardd0017]

Hello,

I'm trying to forward a huge number of ports (8500-8600). I tried using the ASDM but I'm getting an error please see attached file. How do I achieve forwarding the above ports?

Thanks in advance!

-Ed

[Marius Gunnerud]

Actually you can not use object group for NAT. you need to create a regular service object for this. for example.

object service PORTS

service tcp source range 8500 8600

object network SERVER host 10.10.10.10

nat (inside,outside) source static SERVER interface service PORTS PORTS

If you require several different port ranges or ports, each of these would need a seperate NAT statement.

--

Please remember to select a correct answer and rate helpful posts