Monday, November 26, 2018

ASA NAT unused public IP to internal server

Hello!

I'm looking to NAT from an available public IP x.x.x.2/27 to an internal web server y.y.y.3. I have my ASA outside interface as x.x.x.1/27 and was wondering if it is possible to use an available public IP as the NAT address. So far this is the config I've done...

object network WAN_externalip host x.x.x.2

object network LAN-internalip host y.y.y.3

object service TCP-80_HTTP service tcp destination eq www

nat (outside,inside) source static any any destination static WAN_externalip LAN-internalip service TCP-80_HTTP TCP-80_HTTP

This doesn't seem to work, so I feel like I'm missing something.



No comments:

Post a Comment