Port forwarding on Cisco ASA

[Cisco SE]

Hi, 

I have a Cisco ASA 5505 , software 9.1(2)

I need to forward port 443 from a specific hos. Lets say IP: 1.2.3.4 to my internal host 192.168.50.50 

My outside interface has an IP, lets say 5.5.5.5. But my outside interface also listens to anyconnect which i suspect is running on port 443 already. I do have more IP available, i.e 5.5.5.6 and 5.5.5.7. 

I've been trying to figure this out and seeing some videos but i cant sort it out. Anyone have suggestions on how to configure this using CLI would work. 

- Allow traffic from IP 1.2.3.4 to internal host 192.168.50.50 on port 443. 

[MHM Cisco World]

You have more public IP you can use than IP of outside interface?

MHM

[balaji.bandi · Accepted solution]

Depend on the config,

I do have more IP available, i.e 5.5.5.6 and 5.5.5.7

if you have spare IP address then do the following to map static NAT

example :

object network webserver
host 192.168.50.50
nat (inside,outside) static 5.5.5.6

add ACL to allow the ports.

[MHM Cisco World]

Command need

Object network serverPublic

Host <public IP>

Object network serverPriv

Host <priv IP>

Access-list server extended permit tcp any serverPriv eq 443

Access-group server in interface OUT

Nat(IN'OUT) source static serverPriv serverPublic

That all what you need if you have more public IP

MHM