<div>
<div class="content wysiwyg-content">
I am trying to setup static nat for multiple ports from outside to dmz. &nbsp;Here's my statement:<br />
<br />
object network dmz_web<br />
host 10.10.1.10<br />
nat (dmz,outside) static x.x.x.x service tcp 20 20<br />
nat (dmz,outside) static x.x.x.x service tcp 22 22<br />
nat (dmz,outside) static x.x.x.x service tcp 80 80<br />
nat (dmz,outside) static x.x.x.x service tcp 443 443<br />
nat (dmz,outside) static x.x.x.x service tcp 3389 3389<br />
<br />
My device takes the statement, but only the last nat (3389) remains in my config. &nbsp;Is there a way to setup multiple nat ports without having to recreate the same host 5 times and fill my device up with bloat? &nbsp;Or would it be better to just map public to private IP and limit ports using acl?<br />
<br />
Thanks!!<br />
<br />

</div>
</div>


I am trying to setup static nat for multiple ports from outside to dmz.  Here's my statement:

object network dmz_web
host 10.10.1.10
nat (dmz,outside) static x.x.x.x service tcp 20 20
nat (dmz,outside) static x.x.x.x service tcp 22 22
nat (dmz,outside) static x.x.x.x service tcp 80 80
nat (dmz,outside) static x.x.x.x service tcp 443 443
nat (dmz,outside) static x.x.x.x service tcp 3389 3389

My device takes the statement, but only the last nat (3389) remains in my config.  Is there a way to setup multiple nat ports without having to recreate the same host 5 times and fill my device up with bloat?  Or would it be better to just map public to private IP and limit ports using acl?

Thanks!!



Cisco ASA 5510 8.4 Static NAT issue

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.