Add secondary outside IP to interface ASA 5505
Posted on 2014-09-18
I have two outside IPs available for my ASA running 8.3. The IP assigned on Vlan2 and all the NAT is working fine.
I have a server that needs to have a range of ports available on the outside that are already in use on the outside IP.
I need to use the second outside IP to use this new range of ports on this single server.
I have added
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
I have added object Network secondOutsideIP
host <real IP>
I have added object network InsideHostForThisIP
I have added my object-group service portsToOpen tcp-udp
<bunch of ports and ranges>
I have added the ACL -
access-list ACL_Out extended permit tcp any host InsideHostForThisIP object-group portsToOpen
Now, how do I nat (inside,outside) ->please help with remaining code to allow traffic
did I miss a step somewhere please?