I've been trying to setup NAT and give access to a public IP address to my local network, I just can't get it to work. It's my first time using a Cisco firewall.
Thanks for your help!
Since this is your first time with firewall I am mentioning extra configuration which will help you in learning / debugging about ASA configuration
You can add logging to help you with debugging using
The syslog server should listen on UDP port 514 for syslog messages from firewall. These are helpful in debugging problems while experimenting with firewall before deployed for production.
Is is exremely unsecure configuration of firewall as telnet is enabled and that too from all inside IPs. Also everything is being allowed. The idea is to help you test NAT configuration without worrying about ACLs.
Now to forward connections to port 80 for outside interface of ASA to some server use
Similarly for 443 use
Once you are comfortable with NAT, go for having inside, outside and DMZ and configure restrictive ACL to allow only relevant traffic.
There are also other types of NAT / PAT you can configure in ASA.
Using the web interface (ASDM):
1. Add a Static NAT Rule. Go to Configuration -> NAT. Click Add then "Add Static NAT rule". Put in your internal IP information under Real Address, and your external IP information under Static Translation. Check off "Enable PAT" and put in 80 (or 443).
2. Modify the Security Policy to Allow Traffic. Go to Configuration -> Security Policy. Click Add and create a rule that permits incoming traffic from the outside interface (source any) to the internal IP address (specifying the port).
It looks like this hasn't been responded to in a while, but I'll try and explain what we have on our 5510.
First, I've heard there are problems that crop up if you only have one external/public IP address. You have to do some extra configuration and I'm not sure what that is. I'll assume you have at least two and one of them is the firewall's external IP. We'll use an available one below.
In ASDM, go Configuration -> Firewall -> NAT Rules
Click Add -> Add Static NAT Rule
Click OK. You can add another rule for https/443 once you're sure http/80 is working.
Next is a part that got me mixed up when I first got my 5510 so make sure you know which things to put where.
Go to Access Rules (ASDM -> Configuration -> Firewall -> Access Rules)
Add -> Add Access Rule
That should be it. I believe the idea is you allow security access to the external/public IP, then NAT does the translation if the security rule permits.