setting NAT public IP address to local IP address

[mohamed2yassim]

Good Morning,

Setting up public ip address on cisco asa5505 to allow any public ip addressusing 65.10.10.1  to conect to internal ip address.

65.10.10.1 nat to 192.168.10.1

However there is an implicit rule that is blocking the the external IP to connect.

How to resolve, thanks M

[Federico Coto Fajardo]

Hi,

To be able to NAT

65.10.10.1 nat to 192.168.10.1

You should have the following rule:

static (in,out) 65.10.10.1 192.168.10.1

Assuming that the 192.168.10.1 is on the inside and 65.10.10.1 will be translated to the outside.

To permit the incoming traffic, there should be an ACL.

access-list outside permit ip any host 65.10.10.1

access-group outside in interface outside

The above ACL can be modified to permit only the ports needed.

Federico.