cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1220
Views
0
Helpful
3
Replies

Portforwarding On ASA 5525

ermionline
Level 1
Level 1

Hi

I have ASA 5525 i wanted to configure FTP server behind NAT. My IP address information is as follows

outside public IP :- 196.188.30.65

Inside LAN :- 172.31.0.0 255.255.255.0

FTP Server:- 172.31.0.11

 

Regards,

 

3 Replies 3

Pawan Raut
Level 4
Level 4

Try this

object network FTP-SERVER

 host 172.31.0.11

nat (inside,outside) static interface service tcp FTP FTP

Sheraz.Salim
VIP Alumni
VIP Alumni

here you go

 

 

object network FTP-SERVER
 host 172.31.0.11
 nat (inside,outside) static interface service tcp FTP FTP
!
access-list inbound permit tcp any object Internal_FTP_Server eq ftp
!
 access-group inbound in interface outside
!
policy-map global_policy
 class inspection_default
  inspect dns preset_dns_map
  inspect ftp

please do not forget to rate.

Hi,

 

You will need to configure a static NAT translation and an ACL rule to permit those hosts. 

 

object-group network FTP-SERVER
 network-object host 172.31.0.11
 nat (inside,outside) static interface service tcp ftp ftp

access-list INBOUND line 1 permit tcp any object-group  FTP-SERVER eq ftp < Change the ACL name to yours

Regards

 

Review Cisco Networking for a $25 gift card