Link to home
Start Free TrialLog in
Avatar of IT-Gang
IT-GangFlag for Sweden

asked on

PAT on Cisco ASA 5510

Hey.

I have an internal FTP server 10.10.10.10, and I need a specific external network  y.y.y.0 to be able to access it on a different port, lets say TCP 999.
The server runs FTP on port 21 as usual.
What should be the config (CLI or ASDM)

thanks
ASKER CERTIFIED SOLUTION
Avatar of Ernie Beek
Ernie Beek
Flag of Netherlands image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
assuming you have an interface named:
- inside for inside
- outside for outside
- your outside ip address is 1.1.1.1
- your asa version is before 8.3

Then the command is:
 static (inside,outside) tcp 1.1.1.1 999 10.10.10.10 21

to map the port

and to allow for the traffic:
access-group outside_access_in in interface outside
access-list outside_access_in permit tcp y.y.y.0 255.255.255.0 1.1.1.1 255.255.255.255 eq 999
@joelvp: Thanks for confirming that ;)
Avatar of IT-Gang

ASKER

Sorry for grading it C, it was a pure mistake
The C or the question?
Avatar of IT-Gang

ASKER

The C of course :)
That's what I hoped for ;)
Well in that case, we can always ask-a-mod :)

Allow me.........