• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 183
  • Last Modified:

Static NAT config for ASA 8.2

I'm trying to setup static NAT on an ASA 5505, but my config is not working.  Here's what I have so far:

static (inside,outside) 10.20.30.40 1.2.3.4 netmask 255.255.255.255
access-list outside_access_in extended permit tcp any host 1.2.3.4 eq 80
access-list outside_access_in extended permit tcp any host 1.2.3.4 eq 443
access-group outside_access_in in interface outside

Open in new window


Any idea what's going wrong?

FYI: 10.20.30.40 is the outside IP and 1.2.3.4 is the inside IP.
0
tballin
Asked:
tballin
  • 2
1 Solution
 
Pete LongTechnical ConsultantCommented:
Pre 8.3 the ACL should point to the PUBLIC ip not the private IP
0
 
Pete LongTechnical ConsultantCommented:
e.g

no access-list outside_access_in extended permit tcp any host 1.2.3.4 eq 80
no access-list outside_access_in extended permit tcp any host 1.2.3.4 eq 443
access-list outside_access_in extended permit tcp any host 10.20.30.40 eq 80
access-list outside_access_in extended permit tcp any host 10.20.30.40 eq 443

Assuming that your comment
"FYI: 10.20.30.40 is the outside IP and 1.2.3.4 is the inside IP."
is correct

Pete
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now