{"id":1521,"date":"2011-02-11T18:43:37","date_gmt":"2011-02-11T18:43:37","guid":{"rendered":"http:\/\/wiki.freeiz.com\/?p=1521"},"modified":"2016-08-09T12:06:32","modified_gmt":"2016-08-09T12:06:32","slug":"asa-v8-3-port-forward","status":"publish","type":"post","link":"https:\/\/wiki-see.info\/wp\/2011\/02\/11\/asa-v8-3-port-forward\/","title":{"rendered":"ASA v8.3 CCTV Port Forward"},"content":{"rendered":"<p><span style=\"color: #800000;\"><strong>nat (inside,outside) static<\/strong><\/span> = <span style=\"color: #000000;\">Provided 1 to 1 nat from external to internal and gets nested<br \/>\nwithin the object network group<\/span>.<br \/>\n<span style=\"color: #000000;\">!<\/span><br \/>\n<strong><span style=\"color: #800000;\">nat (inside,outside) source static<\/span><\/strong> = <span style=\"color: #000000;\">Provides internal traffic to get naTTed using the<br \/>\nPublic naTTed ip address rather than using the global dynamic ip address otherwise packets<br \/>\nwould get lost and dropped<\/span>.<br \/>\n<span style=\"color: #000000;\">!<\/span><br \/>\n<span style=\"color: #000000;\">object network CCTV_ACL\u00a0 <span style=\"color: #000000;\">(<\/span><span style=\"color: #800000;\">This object is referenced on a firewall rule below &amp; NaT source<\/span><span style=\"color: #000000;\">)<\/span>.<br \/>\nhost 10.0.0.100<br \/>\n!<br \/>\nobject network CCTV_PUBLIC-IP <\/span>(<span style=\"color: #800000;\">This object is referenced on a NaT static<\/span>).<br \/>\n<span style=\"color: #000000;\">host 2. 2.2.211<br \/>\n!<br \/>\nobject network CCTV_WEB<br \/>\nhost 10.0.0.100<br \/>\nnat (inside,outside) static CCTV_PUBLIC-IP service tcp\u00a0 www www<br \/>\n!<br \/>\nobject network CCTV_FTP<br \/>\nhost 10.0.0.100<br \/>\nnat (inside,outside) static CCTV_PUBLIC-IP service tcp\u00a0 ftp ftp<br \/>\n!<br \/>\nobject network CCTV_TELNET<br \/>\nhost 10.0.0.100<br \/>\nnat (inside,outside) static CCTV_PUBLIC-IP service tcp\u00a0 telnet telnet<br \/>\n!<br \/>\nobject network CCTV_5201<br \/>\nhost 10.0.0.100<br \/>\nnat (inside,outside) static CCTV_PUBLIC-IP service tcp\u00a0 5201 5201<br \/>\n!<br \/>\nobject network CCTV_1025<br \/>\nhost 10.0.0.100<br \/>\nnat (inside,outside) static CCTV_PUBLIC-IP service tcp\u00a0 1025 1025<br \/>\n!<br \/>\nobject network CCTV_2074<br \/>\nhost 10.0.0.100<br \/>\nnat (inside,outside) static CCTV_PUBLIC-IP service tcp\u00a0 2074 2074<br \/>\n!<br \/>\nobject network CCTV_2075<br \/>\nhost 10.0.0.100<br \/>\nnat (inside,outside) static CCTV_PUBLIC-IP service tcp\u00a0 2075 2075<br \/>\n!<br \/>\n!<br \/>\nobject-group service CCTV_PORTS tcp<br \/>\ndescription CCTV_COMMUNICATION_PORTS<br \/>\nport-object eq www<br \/>\nport-object eq ftp<br \/>\nport-object eq telnet<br \/>\nport-object eq 5201<br \/>\nport-object eq 1025<br \/>\nport-object range 2074 2075<br \/>\n!<br \/>\naccess-list outside_in line 10 extended permit tcp any object CCTV_ACL object-group CCTV_PORTS<br \/>\naccess-list inside_out line 6 extended permit tcp any object CCTV_ACL object-group CCTV_PORTS<br \/>\n!<br \/>\n<span style=\"color: #000000;\"><span style=\"color: #000000;\">a<\/span>ccess-group outside_in in interface outside<\/span> (<span style=\"color: #800000;\">Assign to outside in Interface<\/span>).<br \/>\n<\/span><span style=\"color: #000000;\">access-group inside_out out\u00a0interface inside<\/span> (<span style=\"color: #800000;\">Assign to inside out Interface<\/span>).<br \/>\n<span style=\"color: #000000;\">!<\/span><br \/>\n<span style=\"color: #000000;\">nat (inside,outside) source static CCTV_ACL CCTV_PUBLIC-IP destination<br \/>\nstatic CCTV_PUBLIC-IP CCTV_ACL<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>nat (inside,outside) static = Provided 1 to 1 nat from external to internal and gets nested within the object network group. ! nat (inside,outside) source static = Provides internal traffic to get naTTed using the Public naTTed ip address rather than using the global dynamic ip address otherwise packets would get lost and dropped. ! [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[91],"class_list":["post-1521","post","type-post","status-publish","format-standard","hentry","category-cisco-asa","tag-asa-port-forward"],"_links":{"self":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/1521","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/comments?post=1521"}],"version-history":[{"count":1,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/1521\/revisions"}],"predecessor-version":[{"id":4894,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/1521\/revisions\/4894"}],"wp:attachment":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/media?parent=1521"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/categories?post=1521"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/tags?post=1521"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}