Port redirection on Cisco ASA 5510

[andy_4578]

Is it possible to do the following on our Cisco ASA 5510??

External IP will be 213.249.x.187

Public Port 80 > HOST - 192.168.111.101 on Port 80
Public Port 81 > DEV - 192.168.111.102 on Port 80
Public Port 3389 > HOST - 192.168.111.16 on 3389
Public Port 3390 > DEV - 192.168.111.102 on 3389
Public Port 3391 > PRODUCTION - 192.168.111.101 on 3389

I've tried but keep getting an error saying

"The modified static NAT rule cannot be configured as it overlaps with an existing rule"

I can understand why it's saying it, but the really annoying thing is we have a 60 quid draytek firewall that can do it, which doesnt help when we've told the customer how good the Cisco kit is.

[Federico Coto Fajardo · Accepted solution]

Hi,

ASA 8.2 and earlier won't allow to share the same IP and ports to do port redirection.

If your ASA is running 8.3, then you can do it now.

Federico.