Solved

Mapping a public IP and ports to inside address

Posted on 2014-09-12
3
556 Views
Last Modified: 2014-09-14
I have what I think is a simple setup and problem.  I have many internal servers, two of them are Lync and Exchange with private IP addresses on them.  How does one setup the ASA (5512) to allow the communication for two things:
1 some internal private IPs use the same hosts - so the ASA fails when you tell it to forward the same ports?
2 with port forwarding how to handling something like Lync that has about 20,000 ports needed to map to its inside?

Currently I have things like OWA working by forwarding port 443 to the correct private IP.  Obviously this a busy port and a issue.  In some places you can reassign HTTPS to another port but there has got to be a better way.

much appreciate of any help/guidance....
0
Comment
Question by:EckoForce_1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 500 total points
ID: 40321218
Youre going to need more than 1 public ip address and do static 1-1 nat for lync and anything else that needs same port
Ike 443
0
 

Author Comment

by:EckoForce_1
ID: 40322199
I was hoping there was a better way.....so I cant have overlapping IPs on my ASA via interfaces, subinterfaces or contexts.....so how do I setup all these public IPs (which I do have).  Create static routes on the upstream router to point many public addresses to one?  My other options is getting a ASA-5505 for each IP - but that seems wasteful.
0
 

Author Comment

by:EckoForce_1
ID: 40322234
thanks for the guidance - I am going to use static NATs  - 1 public to 1 private and then allow my ports with ACLs....much easier that trying to port map!
0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco Phone implementation supported backups 1 44
migrate cisco cat configs 3 35
ASA 5506 Port Forward 4 45
Cisco SRST questions 5 27
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question