Hi every Cisco experts;
I am facing a scenario need to find out the best practice to implement and doing the configuration on my ASA 51xx series firewall. There are three interface on my ASA (Outside, DMZ, Inside).
My ISP provide me a single public IP address only which I configured on "Outside", for example; this single public ip is "201.201.201.100".
Now, I have multiple web server, email server, etc. Also, I am using SSLVPN on ASA in which I configured another port like 88443 for SSLVPN. Because only one public ip address is provided by ISP, I would like to setup a Reverse Proxy server at DMZ and redirect all traffic back to all relevant web server at "Inside".
My reverse proxy server at DMZ; ip address is 192.168.10.10
My public web server at DMZ; ip address is 192.168.10.20
My internal web server ip address is 192.168.20.1
My internal email server ip address is 192.168.20.2
The Outside interface ip address on ASA is 201.201.201.100
when I tried to use this command for natting, I got "overlapping" warning.
hostname (config)# object network DMZ_ReverseProxy
hostname (config-network-object)# host 192.168.10.10
hostname (config-network-object)# nat (dmz,outside) static 201.201.201.100 service tcp http http
How can I implement this configuration...
1. if traffic for port 88443 (SSLVPN), it will terminate at ASA for SSLVPN purpose.
2. if traffic for port 80 and port 443, it will be forwarded to my Reverse Proxy (192.168.10.10), then my reverse proxy server will forward https to 192.168.20.1 at "Inside" and forward http to 192.168.10.20 at "DMZ" relatively.
3. if traffic for port 25, ASA should forward to email server 192.168.20.2
What kind of NAT/PAT should be used and how?
thanks in advance.
Please giving me some idea.
thanks!
