Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Create Server Object to Translate (Layer 4 Translation)

    Code Block
    object-group service SERVER_Services tcp
     port-object eq 3389
     port-object range 6100 6199
     port-object eq ident
    object network SERVER
     host 172.32.100.5
     nat (real,mapped) static interface service tcp ident ident
     nat (real,mapped) static interface service tcp 3389 3389
     nat (real,mapped) static interface service tcp 6103 6103
  2. Create Access List to allow Services to server (Layer 3 Translation)

    Code Block
    access-list outside_access_in extended permit tcp any host SERVER object-group SERVER_Services

8.2 and Below

  1. Create Server Objects to Translate (Layer 4 Translation)

    Code Block
    object-group service SERVER_Services tcp
     port-object eq 3389
     port-object range 6100 6199
     port-object eq ident
    object-group service NETWORK_SERVICES tcp
     group-object SERVER_Services
     group-object SERVER2_Services
     group-object SERVER3_Services
    access-list outside_access_in extended permit tcp any host OUTSIDE_IP object-group NETWORK_SERVICES
  2. Create Access List to allow Services to Server (Layer 3 Translation)

    Code Block
    static (inside,outside) tcp interface ident SERVER ident netmask 255.255.255.255 
    static (inside,outside) tcp interface 3389 SERVER 3389 netmask 255.255.255.255 
    static (inside,outside) tcp interface 6103 SERVER 6103 netmask 255.255.255.255 
    static (inside,outside) tcp interface 80 SERVER2 80 netmask 255.255.255.255    

How to configure VPN

Site-Site

...