Forwarding a range of ports in 8.4

Question

I have an ASA 5505 running 8.4(1), and I'm configuring it with ASDM 6.4(1).  The outside interface is configured with a single static address.  I have a few services port forwarded sucessfully to three different servers on the inside network.
I need to make a media proxy on a SIP server available to the outside.  It requires a large range of forwarded UDP ports for the media channels.
I tried adding a network object NAT rule like the others I'm already using to forward HTTP and RDP.  I entered a range of ports for the real port and the mapped port using the syntax 60000-60999.  ASDM accepted it, but the NAT rule list displays "Any" in the service column.  When I apply the change, I get the following error:
nat (inside,outside) static interface service tcp 60000-60999 60000-60999
                                      ^
ERROR: % Invalid input detected at '^' marker.
How do I forward a large range of UDP ports from the outside interface to a single server on my inside network?  I'd like to use ASDM, but I can switch to the CLI if that works better.
Thanks,
Alan

Answer 1

Hi Alan,
After version 8.3 the Nat is more flexible.
You can configure an object service and apply this to the Nat.
On this way you  configure just one line for the Nat.
Also remember to open the ports on the ACL that you have applied to the outside interface.
For example:
You have an internal server"10.10.10.10"
object service UDP-PORTS
service udp source range 60000 60999
exit
object network obj-10.10.10.10
host 10.10.10.10
exit
nat (inside,outside) source static obj-10.10.10.10 interface service UDP-PORTS UDP-PORTS
Please rate helpful posts.
Regards,
Harvey