Cisco ASA 5508-X, Configuration Manual

Page: 10 / 428

1-6
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 1
Use Case: Expose a Server to the Public
Figure 1-1 Static NAT for an Inside Web Server
Procedure
Step 1 Create a network object for the internal web server.
hostname(config)# object network myWebServ
hostname(config-network-object)# host 10.1.2.27
Step 2
Configure static NAT for the object:
hostname(config-network-object)# nat (inside,outside) static 209.165.201.10
Step 3 Add an access rule to the access group attached to the outside interface to permit web access to the
server.
hostname(config)# access-list outside_access_in line 1 extended permit tcp any4 object
myWebServ eq http
Step 4
If you do not already have an access group on the outside interface, apply it using the access-group
command:
hostname(config)# access-group outside_access_in in interface outside
Related Topics
• Static NAT, page 9-27
Outside
Inside
10.1.2.1
209.165.201.1
Security
Appliance
myWebServ
10.1.2.27
209.165.201.12
10.1.2.27 209.165.201.10
248772
Undo Translation