Cisco ASA Series Configuration Guide

1-6
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 1
Use Case: Expose a Server to the Public
Figure 1-1 Static NAT for an Inside Web Server
Procedure
Step 1 Create a network object for the internal web server.
hostname(config)# object network myWebServ
hostname(config-network-object)# host 10.1.2.27
Step 2 Configure static NAT for the object:
hostname(config-network-object)# nat (inside,outside) static 209.165.201.10
Step 3 Add an access rule to the access group attached to the outside interface to permit web access to the
server.
hostname(config)# access-list outside_access_in line 1 extended permit tcp any4 object
myWebServ eq http
Step 4 If you do not already have an access group on the outside interface, apply it using the access-group
command:
hostname(config)# access-group outside_access_in in interface outside
Related Topics
• Static NAT, page 9-27
Outside
Inside
10.1.2.1
209.165.201.1
Security
Appliance
myWebServ
10.1.2.27
209.165.201.12
10.1.2.27 209.165.201.10
248772
Undo Translation

Cisco ASA Series Specifications

General

Model	ASA 5505
Interfaces	Varies by model (Fast Ethernet, Gigabit Ethernet, 10 Gigabit Ethernet, etc.)
High Availability	Active/Standby or Active/Active (varies by model)
Power Supply	Varies by model
Form Factor	Varies by model
Operating System	Cisco ASA Software
IPsec VPN	Supported
SSL VPN	Supported
IPS Throughput	Varies by model