Really confused regarding source NAT and Destination NAT in Cisco ASA. I have a NVR in IP 10.10.20.20 and locally it is opened via http://10.10.20.20. Remotely, i want this to be accessed via my public IP 201.202.203.204:8080. So what i understand is, i have to port forward this port in this public ip. Is it not destination nat? What i use here is auto NAT: Object network obj-10.10.20.20 host 10.10.20.20 nat(inside,outside) static interface service tcp 80 8080
And with Manual NAT: We create objects. Object network obj-10.10.20.20 host 10.10.20.20
similarly, for ports: object service port-80 service tcp source eq 80
object service port-8080 service tcp source eq 8080
So, NAT command would be like: nat(inside,outside) source static obj-10.10.20.20 interface service port-80 port-8080
And access rule would be: access-list access-list-name extended permit tcp any host 10.10.20.20 eq http
Is it not that port-8080 should have been the destination port? After all, we are opening the ports 8080 for remote users. Please clearify when it becomes source port and when it becomes the destination port. Thank you in advance.