New answers tagged

2

object network obj-SERVER host <SERVER> ! object network obj_any subnet 0.0.0.0 0.0.0.0 ! object service dest-tcp-REAL service tcp destination eq <REAL> object service dest-tcp-MAPPED service tcp destination eq <MAPPED> ! nat (outside,inside) source static obj_any interface destination static interface obj-SERVER service dest-tcp-...


1

So, as I said, you can mostly accomplish what you want (minus an actual object-group to reference in a single NAT statement). You'll need to create multiple objects all pointed to the same host IP address, but named differently; this will allow you to map multiple ports to the same host without mapping ALL ports and protocols to said host (it will only map ...


Top 50 recent answers are included