Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a problem with our new corporate CISCO ASA5510 firewall. With our old firewall it was possible to do the following PAT:

outside     -> inside
1.1.1.1:22  -> 192.168.1.2:22
1.1.1.1:443 -> 192.168.1.2:22

How can I do the same on the CISCO box? I need this because of another firewall (not under my control) that don't allow anything out on port 22.

Yours Rune Henssel

share|improve this question
add comment

1 Answer 1

Unless I am missing something, you should just be able to use static nat rules:

static (inside,outside) tcp 1.1.1.1 22 192.168.1.2 22 netmask 255.255.255.255 static (inside,outside) tcp 1.1.1.1 443 192.168.1.2 22 netmask 255.255.255.255

share|improve this answer
    
That just gives me an this: static (inside,outside) tcp 1.1.1.1 22 192.168.1.2 22 netmask 255.255.25 ^5.255 ERROR: % Invalid input detected at '^' marker. –  Rune Henssel Apr 4 '11 at 17:46
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.