Showing results for 
Search instead for 
Did you mean: 

Problem Configuring Public Servers and PAT in ASDM

N3t W0rK3r


I'm using ASDM v6.4 to configure an ASA5520 runing 8.2(5).  Trying to set up PAT using the Public Servers screen in ASDM, but there is no place for public and private service to be specified.  I only see a field for service.  Am I missing something?

Thanks in advance.


5 Replies 5

Jouni Forss


Not the best person to advice on the ASDM side as I use 99% CLI on the ASA

But quickly checking the ASDM side on one of my ASAs seems to me that the section you are referring to should give the option to configure

  • Static NAT configuration
  • Define services allowed to that Static NAT IP address

You can also go to the following window on the ASDM

Configuration -> Firewall -> NAT Rules -> Click on the Add button -> Choose the rule type you want to configure

- Jouni

Thank you Jouni... but the documentation says there should be a field of Private Service and field for Public Service in the Add Public Server dialog, thereby fascilitating the PAT... but my dialog looks exactly like the one you show.

I guess I can go into the NAT Rules and modify the static NAT rules that are created as a result of the Public Servers creation.



I think I have might have read the post wrong / Understood you wrong

Are you trying to configure Port Forward / Static PAT for your server using the public IP address of your "outside" interface?

Then you should go to the section

Configuration -> Firewall -> NAT Rules -> Add Button -> Add Static NAT Rule

It will enable you to configure the Static PAT which lets you configure the Real and Mapped port

- Jouni

Thanks again Jouni.  I think you understood me just fine the first time.

I am trying to confgiure a port forward from outside to inside, but the outside IP is not that of my outside interface, but one that lies in the same subnet as the outside interface.

I think I can use the Add Static NAT Rule dialog to accomplish what I need.  It's just frustrating that the Cisco documentation doesn't jive with the gui.  Click the Help button on the Public Servers dialog and you'll see what I mean.

Thanks again.


One reason why I only use CLI for the NAT and ACL and any other configurations I can is the reason that I can see everything with one command if needs be.

With ASDM you are jumping through multiple windows and are not quite sure what you have accomplished

Basic configuration format for Static PAT  (Port Forward) for example is

static (inside,outside) netmask

Unless I remember wrong. I have already pretty much moved to the new 8.3+ NAT format on most of the devices I configure.

- Jouni

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: