Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a problem with our new corporate CISCO ASA5510 firewall. With our old firewall it was possible to do the following PAT:

outside     -> inside
1.1.1.1:22  -> 192.168.1.2:22
1.1.1.1:443 -> 192.168.1.2:22

How can I do the same on the CISCO box? I need this because of another firewall (not under my control) that don't allow anything out on port 22.

Yours Rune Henssel

share|improve this question

Unless I am missing something, you should just be able to use static nat rules:

static (inside,outside) tcp 1.1.1.1 22 192.168.1.2 22 netmask 255.255.255.255 static (inside,outside) tcp 1.1.1.1 443 192.168.1.2 22 netmask 255.255.255.255

share|improve this answer
    
That just gives me an this: static (inside,outside) tcp 1.1.1.1 22 192.168.1.2 22 netmask 255.255.25 ^5.255 ERROR: % Invalid input detected at '^' marker. – Rune Henssel Apr 4 '11 at 17:46

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.