New answers tagged cisco-asa
2
object network obj-SERVER
host <SERVER>
!
object network obj_any
subnet 0.0.0.0 0.0.0.0
!
object service dest-tcp-REAL
service tcp destination eq <REAL>
object service dest-tcp-MAPPED
service tcp destination eq <MAPPED>
!
nat (outside,inside) source static obj_any interface destination static interface obj-SERVER service dest-tcp-...
1
So, as I said, you can mostly accomplish what you want (minus an actual object-group to reference in a single NAT statement).
You'll need to create multiple objects all pointed to the same host IP address, but named differently; this will allow you to map multiple ports to the same host without mapping ALL ports and protocols to said host (it will only map ...
Top 50 recent answers are included
Related Tags
cisco-asa × 615cisco × 285
vpn × 149
firewall × 130
nat × 64
ipsec × 57
routing × 47
failover × 24
vlan × 22
acl × 22
security × 21
cisco-anyconnect × 19
switch × 16
cisco-ios × 16
tunnel × 13
site-to-site × 13
dhcp × 11
cisco-commands × 11
sslvpn × 11
router × 10
network × 10
troubleshooting × 10
ospf × 9
ike × 9
ping × 7