Cisco ASA 5510 8.4 Static NAT issue

I am trying to setup static nat for multiple ports from outside to dmz.  Here's my statement:

object network dmz_web
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 20 20
nat (dmz,outside) static x.x.x.x service tcp 22 22
nat (dmz,outside) static x.x.x.x service tcp 80 80
nat (dmz,outside) static x.x.x.x service tcp 443 443
nat (dmz,outside) static x.x.x.x service tcp 3389 3389

My device takes the statement, but only the last nat (3389) remains in my config.  Is there a way to setup multiple nat ports without having to recreate the same host 5 times and fill my device up with bloat?  Or would it be better to just map public to private IP and limit ports using acl?

Thanks!!

nwernerAsked:
Who is Participating?
 
lrmooreCommented:
If you have the spare public IP, I much prefer a 1-1 static nat and just open the ports with an access-list and port-group.
0
 
Ernie BeekExpertCommented:
As Irmoore said, to keep the config simple do a 1-1 nat and control it through the access list. Otherwise you really have to get bloating and get something like:

object network dmz_web_1
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 20 20

object network dmz_web_2
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 22 22

object network dmz_web_3
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 80 80

object network dmz_web_4
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 443 443

object network dmz_web_5
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 3389 3389


Hopefully the'll change it in the future, because this is exponentially enlarging some of my configs :-~
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.