Cisco ASA 5510 8.4 Static NAT issue

I am trying to setup static nat for multiple ports from outside to dmz.  Here's my statement:

object network dmz_web
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 20 20
nat (dmz,outside) static x.x.x.x service tcp 22 22
nat (dmz,outside) static x.x.x.x service tcp 80 80
nat (dmz,outside) static x.x.x.x service tcp 443 443
nat (dmz,outside) static x.x.x.x service tcp 3389 3389

My device takes the statement, but only the last nat (3389) remains in my config.  Is there a way to setup multiple nat ports without having to recreate the same host 5 times and fill my device up with bloat?  Or would it be better to just map public to private IP and limit ports using acl?

Thanks!!

nwernerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lrmooreCommented:
If you have the spare public IP, I much prefer a 1-1 static nat and just open the ports with an access-list and port-group.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Ernie BeekExpertCommented:
As Irmoore said, to keep the config simple do a 1-1 nat and control it through the access list. Otherwise you really have to get bloating and get something like:

object network dmz_web_1
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 20 20

object network dmz_web_2
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 22 22

object network dmz_web_3
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 80 80

object network dmz_web_4
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 443 443

object network dmz_web_5
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 3389 3389


Hopefully the'll change it in the future, because this is exponentially enlarging some of my configs :-~
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.