Cisco ASA Series Configuration Manual page 10

Use Case: Expose a Server to the Public
Figure 1-1
10.1.2.27
Procedure
Create a network object for the internal web server.
Step 1
hostname(config)# object network myWebServ
hostname(config-network-object)# host 10.1.2.27
Configure static NAT for the object:
Step 2
hostname(config-network-object)# nat (inside,outside) static 209.165.201.10
Add an access rule to the access group attached to the outside interface to permit web access to the
Step 3
server.
hostname(config)# access-list outside_access_in line 1 extended permit tcp any4 object
myWebServ eq http
If you do not already have an access group on the outside interface, apply it using the access-group
Step 4
command:
hostname(config)# access-group outside_access_in in interface outside
Related Topics
• Static NAT, page 9-27
Cisco ASA Series Firewall CLI Configuration Guide
1-6
Static NAT for an Inside Web Server
Undo Translation
209.165.201.10
209.165.201.12
Outside
209.165.201.1
Security
Appliance
10.1.2.1
Inside
myWebServ
10.1.2.27
Chapter 1