...
Create Server Object to Translate (Layer 4 Translation)
Code Block object-group service SERVER_Services tcp port-object eq 3389 port-object range 6100 6199 port-object eq ident object network SERVER host 172.32.100.5 nat (real,mapped) static interface service tcp ident ident nat (real,mapped) static interface service tcp 3389 3389 nat (real,mapped) static interface service tcp 6103 6103
Create Access List to allow Services to server (Layer 3 Translation)
Code Block access-list outside_access_in extended permit tcp any host SERVER object-group SERVER_Services
8.2 and Below
Create Server Objects to Translate (Layer 4 Translation)
Code Block object-group service SERVER_Services tcp port-object eq 3389 port-object range 6100 6199 port-object eq ident object-group service NETWORK_SERVICES tcp group-object SERVER_Services group-object SERVER2_Services group-object SERVER3_Services access-list outside_access_in extended permit tcp any host OUTSIDE_IP object-group NETWORK_SERVICES
Create Access List to allow Services to Server (Layer 3 Translation)
Code Block static (inside,outside) tcp interface ident SERVER ident netmask 255.255.255.255 static (inside,outside) tcp interface 3389 SERVER 3389 netmask 255.255.255.255 static (inside,outside) tcp interface 6103 SERVER 6103 netmask 255.255.255.255 static (inside,outside) tcp interface 80 SERVER2 80 netmask 255.255.255.255
How to configure VPN
Site-Site
...