Static Policy

[patricia20]

Hi,

I need to NAT an internal server and allow only certain ports open. After creating access-lists for these ports, should I still enable PAT (for the said ports) in the NAT configuration?

Thanks!

[Alan Huseyin Kayahan]

Hi Patricia,

If you applied a one-to-one NAT like following

static (inside,outside) publicip localip netmask 255.255.255.255

Then you dont need to specify these ports individually.

But if you applied PAT, you should forward these ports as following

static (inside,outside) tcp interface portno localip portno netmask 255.255.255.255

Regards

[patricia20]

Ok, thanks!