Thursday, March 14, 2013

Cisco ASA: How To Add A Static NAT In 8.3 And Higher Code

Have you ever needed to add a static NAT translation on an ASA that is running code 8.3 or higher, but didnt know how?  Well, here is what you do.  In this example, I have a printer that needs accessed from the Internet from a company with the IP address of 2.2.2.58.  Follow along the config below and I think you will see that this is somewhat easy.  My printer IP is 192.168.1.3 and Im using port 9100.
ASA 8.3 code and higher:
object network obj-192.168.1.3
 host 192.168.1.23
nat (inside,outside) static 4.4.4.11 service tcp 9100 9100

access-list outside_in  permit tcp host 2.2.2.58 host 192.168.1.3 eq 9100

That is all you have to do.

No comments:

Post a Comment

Your comment will be reviewed for approval. Thank you for submitting your comments.