Multiple IP's - Routing to internal hosts

Posted on 2013-10-15
Medium Priority
Last Modified: 2013-10-19
Hello all -
First time posting - Hope I am following all the rules.

I have a cisco ASA 5505 as a router at a small business.  The customer has multiple WAN IP's available.  I need to forward ports from one IP to one internal host and from another WAN IP to another internal host.  I've attached the config.  Here is what I want to happen.

443 on to forward to
443 on to forward to

Thanks in advance for any help you can provide.

Question by:OrrMinnesota
  • 2
  • 2
LVL 81

Expert Comment

ID: 39575828
You would not use interface
nat (inside,outside) tcp 443 443 netmask

Not sure how you manage the multiple WANs as it does not appear that the ASA is the device on which the WANs terminate.

Author Comment

ID: 39575960
Thanks for the reply Arnold.

I'm not sure what you mean.  Our ISP is a cable provider and they have given us a range of WAN IP's.  In this example

All traffic shows up from .2 (whatismyip.com) and inbound to .2 NAT'ing to internal host is working fine.

I am trying to get traffic that is addressed to .3 (a DNS A Record) on 443 routed to a seperate internal host.  

Hope I am describing this properly as routing and switching is not my area of expertise.

Again thanks for the time.

LVL 16

Accepted Solution

btassure earned 1500 total points
ID: 39576084
Hi, I think this has been confused a little. The first part of what Arnold said is correct, just replace the NAT entries you already have with something more like:

static (inside,outside) tcp 443 443 netmask

And add the corresponding traffic to your inbound ACL rule:

access-list outside_access_in extended permit tcp any eq https

I would suggest you create objects and name them for these things though, it makes it much easier to see what's happening in the config and in ASDM.

Are you using ASDM to configure the 5505?
LVL 81

Expert Comment

ID: 39576343
The other part you need to change the outside map I.e. Traffic originating from 443 will be seen as coming from while the same response from 443 will be seen from

Is that what you are asking about?

Author Closing Comment

ID: 39585498
Thanks all - I did not get a chance to test although I appreciate the feedback and will reference if needed.  Customer ended up going in a direction that did not require the question or solution.  In the future I will attempt to be more clear.  Thanks again for those  that took the time to answer.

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

If you’re involved with your company’s wide area network (WAN), you’ve probably heard about SD-WANs. They’re the “boy wonder” of networking, ostensibly allowing companies to replace expensive MPLS lines with low-cost Internet access. But, are they …
On Feb. 28, Amazon’s Simple Storage Service (S3) went down after an employee issued the wrong command during a debugging exercise. Among those affected were big names like Netflix, Spotify and Expedia.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

622 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question