Solved

PAT's on the outside interface of a ASA 5510

Posted on 2016-10-20
3
33 Views
Last Modified: 2016-10-20
I have an ASA 5510 with two public subnets... The first subnet has an IP address allocated to the outside interface of the ASA...  That's it only function...  Now..  I've ran out of public IP's and I need to create a PAT for ports 80, 443, 4307, and 4310...  In the past I tried creating a PAT via my outside interface and had issues..  Is this possible?  Can someone lead me in the right direction?  I normally do the below commands to create a PAT on one of my public IPs..  How would I do that for my outside interface/IP?

object network obj-192.168.1.131
host 192.168.1.131

access-list outside extended permit tcp any host 192.168.1.131 eq https

object network obj-192.168.1.131
nat (inside,outside) static MypublicIP service tcp https https

access-group outside in interface outside
0
Comment
Question by:gopher_49
3 Comments
 
LVL 13

Accepted Solution

by:
SIM50 earned 500 total points
ID: 41852801
object network obj-192.168.1.131
host 192.168.1.131
nat (inside,outside) static interface service tcp 80 80

If you have SSL VPN enabled on outside interface, I wouldn't do PAT on port 443 or it will brake your VPN.
0
 
LVL 16
ID: 41853187
I believe you want to PAT on one of the usable public IP's, but not the global IP that's assigned to the outside interface itself, right? If that's the case, simply reference the IP from your usable block that you want to use in place of "MypublicIP" and you should be good.

MO
0
 

Author Closing Comment

by:gopher_49
ID: 41853258
Oh yea.  I forgot about that.  Guess I'll need more IPs.
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Have you experienced traffic destined through a Cisco ASA firewall disappears and you do not know if the traffic stops in the firewall or somewhere else? The solution is the capture feature. This feature was released in 6.2(1) and works in all firew…
This article will cover setting up redundant ISPs for outbound connectivity on an ASA 5510 (although the same should work on the 5520s and up as well).  It’s important to note that this covers outbound connectivity only.  The ASA does not have built…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now