Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a problem with our new corporate CISCO ASA5510 firewall. With our old firewall it was possible to do the following PAT:

outside     -> inside
1.1.1.1:22  -> 192.168.1.2:22
1.1.1.1:443 -> 192.168.1.2:22

How can I do the same on the CISCO box? I need this because of another firewall (not under my control) that don't allow anything out on port 22.

Yours Rune Henssel

share|improve this question

1 Answer 1

Unless I am missing something, you should just be able to use static nat rules:

static (inside,outside) tcp 1.1.1.1 22 192.168.1.2 22 netmask 255.255.255.255 static (inside,outside) tcp 1.1.1.1 443 192.168.1.2 22 netmask 255.255.255.255

share|improve this answer
    
That just gives me an this: static (inside,outside) tcp 1.1.1.1 22 192.168.1.2 22 netmask 255.255.25 ^5.255 ERROR: % Invalid input detected at '^' marker. –  Rune Henssel Apr 4 '11 at 17:46

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.