RE: OT:ASA question

From: Ryan West <rwest_at_zyedge.com>
Date: Wed, 1 May 2013 18:12:24 +0000

Static (dmz,outside) tcp 2.2.2.2 50000 10.10.10.12 50000
Static (dmz,outside) tcp 2.2.2.2 50001 10.10.10.12 50001
Static (dmz,outside) tcp 2.2.2.2 50002 10.10.10.12 50002
.
.
.
Static (dmz,outside) tcp 2.2.2.2 59999 10.10.10.12 59999

As someone else already mentioned, probably better to do a 1:1 static (dmz,outside) 2.2.2.2 10.10.10.12 with your current config and leave the other PAT's as is.

-ryan

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of marc abel
Sent: Wednesday, May 01, 2013 1:44 PM
To: Dennis Worth
Cc: Cisco certification
Subject: Re: OT:ASA question

Upgrade to post 8.3 ASA code. You can do this in the new NAT but you have to do 1 to 1 on that version.

On Sat, Apr 27, 2013 at 10:30 AM, Dennis Worth <dennis.worth_at_gmail.com>wrote:

> Group,
>
> I ran into an issue with port ranges for static Natting in ver 8.2.1
> Anyone come up with a work around this?
>
> static (DMZ,OUTSIDE) tcp 2.2.2.2 https 10.10.10.10 https netmask
> 255.255.255.255
> static (DMZ,OUTSIDE) tcp 2.2.2.2 444 10.10.10.11 444 netmask
> 255.255.255.255
> static (DMZ,OUTSIDE) tcp 2.2.2.2 445 10.10.10.12 445 netmask
> 255.255.255.255
>
>
> This is what i want to do, but can't.
> static (DMZ,OUTSIDE) udp 2.2.2.2 50000-59999 10.10.10.12 50000-59999
> netmask 255.255.255.255
>
> Thanks,
>
> --
> Dennis Worth
>
>
> Blogs and organic groups at http://www.ccie.net
>
> ______________________________________________________________________
> _ Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

--
Marc Abel
CCIE #35470
(Routing and Switching)
Blogs and organic groups at http://www.ccie.net
Received on Wed May 01 2013 - 18:12:24 ART

This archive was generated by hypermail 2.2.0 : Mon Jun 03 2013 - 06:34:34 ART