Outside to inside translate question. ASA5505

[Monocerebric]

Hi all!

I have a ASA5505 at a customer's environment and they want to have another location connect to an internal server for a certain type of communication. I want to use ASDM (6.2) to make the proper arrangement.

Situation:

Static IP X is the external facing IP of Location A (my customer's environment)

Static IP Y is the External facing IP of Location B (the second office)

Port 12345 is the port used internally at Location A

The internal IP is Z at Location A

How can I allow Location B on IP Y to connect to Location A on IP X to forward to Internal IP Z with Port 12345?

Location B should be using port 12345 to connect to 12345 internally at Location A

Many thanks!

[mkazam001 · Accepted solution]

hi, this is called port-forwarding & can be done via the CLI - i don't use the asdm so i can't advise about that:

its not too difficult as you can see below, just create 2 objects - 1 with internal IP & 1 with external IP, a static nat statement, and you need the acl to allow your source IP through

you may have to change the interface names below and instead of 'any' as the source use the ext facing IP of location B eg. 200.2.2.2 255.255.255.255 or host 200.2.2.2

object network websvr-ext
host 100.1.1.10
object network websvr-int2
host 172.16.0.10
nat (dmz,outside) static websvr-ext service tcp 12345 12345
access-list outside-in ext permit tcp any object websvr-int2 eq 80

you can access CLI via asdm - under tool perhaps?

regards, mk

please rate as solved if it so :)

[Monocerebric]

Thanks.  Is the eq 80 on the acl necessary if my example port is 12345 not using http?

[mkazam001]

sorry, that was a type - should be eq 12345

please rate as solved if the case was so :)

regards, mk