05-01-2020 05:53 AM
Hi,
object-group service DM_INLINE_SERVICE_1
service-object object 8069
access-list Outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any object Obj-192.168.100.100
object network 192.168.100.100
nat (DMZ,Outside) static 1.1.1.1
users are accessing using https://1.1.1.1:8069
I need to change the port from 8069 to 8080 without changing in the server .
How can I change it in the NAT
Thanks
05-01-2020 08:50 AM - edited 05-01-2020 09:09 AM
Just change the port number that it.
object service 8080
service tcp destin eq 8080
!
object-group service DM_INLINE_SERVICE_1
service-object object 8080 ! object network 192.168.100.100 nat (DMZ,Outside) static 1.1.1.1 ! access-list Outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any object Obj-192.168.100.100
05-01-2020 02:27 PM
05-02-2020 04:33 AM
sorry i am confused what you asking. you saying user coming from outside interface with any random ip address with random port need to hit server 8089 but before hitting its need to change the port 8089 to port 8080?
05-02-2020 09:56 AM
05-02-2020 12:20 PM - edited 05-02-2020 12:26 PM
object network 192.168.100.100 nat (DMZ,Outside) static 1.1.1.1 service tcp 8080 8069 ! access-list Outside_access_in extended permit tcp any object Obj-192.168.100.100 eq 8080
now when end user open a url 1.1.1.1:8080 asa will do the translation to port 8069.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide