Solved

static nat on cisco asa version 9.1

Posted on 2013-11-26
8
8,022 Views
Last Modified: 2013-12-02
Hi

How can I configure static nat on cisco asa version 9.1?
I want to be able to access my server via rdp 3389 from external my internal ip of server is 192.168.1.10.

Interface 0/0
Nameif outside
Security-level 0
196.47.19.5

Interface 0/1
Nameif inside
Security-level 0
192.168.1.1


please give me the command to achieve this
0
Comment
Question by:ciscosupp
  • 4
  • 2
  • 2
8 Comments
 
LVL 57

Assisted Solution

by:Pete Long
Pete Long earned 250 total points
ID: 39681122
That's not a Static NAT that's a port forward (Static PAT)

object network Server-3389
  host 192.168.1.1
  nat (inside,outside) static interface service tcp 3389 3389
access-list inbound permit tcp any object Server-3389 eq 3389
access-group inbound in interface outside


Pete
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 39681130
0
 

Author Comment

by:ciscosupp
ID: 39682015
You mean network-object host 192.168.1.10 and not 192.168.1.1     :-)

I get error please see attached file
static-PAT.jpg
0
 
LVL 12

Accepted Solution

by:
Henk van Achterberg earned 250 total points
ID: 39683011
This is the most clean solution:

object network SERVER
 host 192.168.1.10

object service rdp
 service tcp destination eq 3389

nat (outside,inside) source static any any destination static interface SERVER service rdp rdp unidirectional no-proxy-arp

access-list outside_access_in permit tcp any object SERVER eq 3389
access-group outside_access_in in interface outside
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 

Author Comment

by:ciscosupp
ID: 39683072
okay thanks will try
must it be nat (outside,inside)  or nat (inside,outside,) bit confused please advice
0
 
LVL 12

Expert Comment

by:Henk van Achterberg
ID: 39683176
exactly as I wrote it down!
0
 

Author Comment

by:ciscosupp
ID: 39687204
I tried but get error see below and my object is created

asa(config)# show object-group id rdp
object-group service rdp
 service-object tcp destination eq 3389


asaconfig)# nat (outside,inside) source static any any destination static interface SERVER service rdp rdp

ERROR: rdp is not a valid service object name

please advice
0
 

Author Comment

by:ciscosupp
ID: 39689922
got it working
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now