Re: nat a range of ports to a local IP



255.255.255.255 mas missing :-)



M skrev:
Hi Walter,

Thank you for your answer.

I get this error in line two:
ASA-xx(config)# access-list map_inbound permit tcp 192.168.1.2 range 2048 3000 any
^
ERROR: % Invalid Hostname


Best Regards
Martin






Walter Roberson skrev:
In article <46332394$0$90269$14726298@xxxxxxxxxxxxxxx>,
M <ujjj@xxxxxxxxxxxxx> wrote:

I need to NAT a range of ports into a local IP. port 2048 -> 3000 to 192.168.1.2.

What is the best way to do this om a ASA5505?

My conf (does not work on a ASA):
ip nat pool p2p 192.168.1.2 192.168.1.2 netmask 255.255.255.0 type rotary
ip nat inside destination list allow_inbound pool p2p
access-list allow_inbound permit tcp any any range 2048 3000

If the public IP to be used is the interface IP:

access-list allow_inbound permit tcp any interface outside range 2048 3000
access-list map_inbound permit tcp 192.168.1.2 range 2048 3000 any
access-group allow_inbound in interface outside
static (inside,outside) interface access-list map_inbound
.



Relevant Pages

  • Re: SETUP A VPN CONNECTION FROM THE OUTSIDE
    ... interface ethernet0 100full ... access-list allow_inbound permit tcp any interface outside eq smtp ... pdm location 10.1.1.6 255.255.255.255 inside ... access-group allow_inbound in interface outside ...
    (comp.dcom.sys.cisco)
  • Re: SETUP STATIC ENTRY FOR HOST BEHIND PIX
    ... You cannot telnet to the outside interface ... access-list allow_inbound permit tcp any interface outside eq pop3 ... access-group deny_outbound in interface inside ...
    (comp.security.firewalls)
  • Re: PIX VPN help.
    ... have to use to connect to the remote host. ... static 192.168.100.0 192.168.10.0 netmask ... access-list 100 permit tcp any host a.a.a.102 eq ident ... access-group 100 in interface outside ...
    (comp.dcom.sys.cisco)
  • RE: [fw-wiz] Cisco PIX 501 Port Redirection Problem
    ... interface ethernet1 100full ... fixup protocol dns maximum-length 512 ... access-list outside_in permit tcp any interface outside eq https ... access-group outside_in in interface outside ...
    (Firewall-Wizards)
  • Re: PIX VPN help.
    ... have to use to connect to the remote host. ... static 192.168.100.0 192.168.10.0 netmask ... access-list 100 permit tcp any host a.a.a.102 eq ident ... access-group 100 in interface outside ...
    (comp.dcom.sys.cisco)