Access from the internet

[Mmiselo]

I need to allow access from a public IP to a private IP in our network. Is there a way that we can achieve this without having to assign a public address and have it Natted to the private IP? We are using a an Cisco ASA 5540.

[Richard Burts]

If a device in the Internet is to initiate traffic to a device with a private address in your network then there must be a static NAT which translates your private address to a public address. If you have only a single public IP address for your ASA you might look into port forwarding as a potential solution to your requirements.

HTH

Rick

[Mmiselo]

Hi Richard, I see how I would use static NAT, but I wanted to avoid having to assign a publick IP.SO how do I achieve this by doing port forwarding?

[shaps]

as already mentioned you would use your current outside interface IP and then port forward to an internal IP.  

you would not necessarily need an additional IP unless  there is an overlap in the ports being forwarded

[Richard Burts]

You could use this link to get information about port forwarding on ASA

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113024-asa-82-port-forward-00.html#forwarding

HTH

Rick