Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to get port forwarding on my ASA working.

I'm using:

object network server1
 nat (inside,outside) static interface service tcp 25 25

and an access list, and it works fine, however, I can't add more than one nat statement to it.

Could anyone point me in the right direction?

share|improve this question
add comment

1 Answer 1

up vote 3 down vote accepted

You need separate object statements for each port or you need a dedicated IP address for your server (which would be preferred). Here's what each one looks like

If you would like to do PAT:

object network server1_smtp
host 192.168.1.100
nat (inside,outside) static interface service tcp 25 25
!
object network server1_https
host 192.168.1.100
nat (inside,outside) static interface servcie tcp 443 443
!
access-list outside_access_in extended permit tcp any host 192.168.1.100 eq 25
access-list outside_access_in extended permit tcp any host 192.168.1.100 eq 443

If you would like to give it its own IP address:

object network server1
host 192.168.1.100
nat (inside,outside) static 1.1.1.1
!
access-list outside_access_in extended permit tcp any host 192.168.1.100 eq 25
access-list outside_access_in extended permit tcp any host 192.168.1.100 eq 443

share|improve this answer
    
Thanks! Much appreciated! –  fdf33 May 21 '11 at 10:58
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.