Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a problem with our new corporate CISCO ASA5510 firewall. With our old firewall it was possible to do the following PAT:

outside     -> inside  -> ->

How can I do the same on the CISCO box? I need this because of another firewall (not under my control) that don't allow anything out on port 22.

Yours Rune Henssel

share|improve this question

Unless I am missing something, you should just be able to use static nat rules:

static (inside,outside) tcp 22 22 netmask static (inside,outside) tcp 443 22 netmask

share|improve this answer
That just gives me an this: static (inside,outside) tcp 22 22 netmask 255.255.25 ^5.255 ERROR: % Invalid input detected at '^' marker. – Rune Henssel Apr 4 '11 at 17:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.