Cisco ASA NAT/PAT Multiple WAN IPs

Question

I'm trying to setup a NAT / PAT in ASA 5520, I'm able to do so very well when the Public IP I want translated to Internal host is configured on the Outside.

Question is the ISP provided 1.1.1.1/30 for the Outside interface and an extra 2.2.2.0/24 for use as extra public IPs.

On the old Cisco Router those IPs don't need to be configured on any interface just added as regular NAT entries and that would work.

I've tried added a static NAT but there is not even possibility to do it by port.

The goal would be 2.2.2.2:444 -> 192.168.0.1:444. Any advice how that can be accomplished?

Thanks,

Answer 1

Yes, you can certainly configure a Static PAT on a Cisco ASA. Typically this is done using AutoNAT:

Within an object definition, this is the syntax you would use:

nat (<REAL-INTF>, <MAPPED-INTF>) static <MAPPED-IP> [service <tcp|udp> <REAL-PORT> <MAPPED-PORT>]

There is also a way to do it with Manual NAT syntax, but that is genearlly only required if you have particular NAT precedence concerns, or if you are trying to configure it conditionally (i.e., based upon both the source and destination of traffic -- otherwise known as a Policy NAT).

Example:

To configure that, you would use this syntax:

object network WEB41-www
  host 10.4.4.41
  nat (inside,outside) static 73.8.2.44 service tcp 8080 80

object network WEB42-https
  host 10.4.4.42
  nat (inside,outside) static 73.8.2.44 service tcp 443 443

Image and examples are from this article:

https://www.practicalnetworking.net/stand-alone/cisco-asa-nat/

(Disclaimer: I wrote the article. There are no ads. It is 100% free. Hope it helps).