ASA NAT port forwarding multiple ports to same IP

When configuring Network Address Translation (NAT) port forwarding on a Cisco ASA, it is possible to forward multiple ports to the same IP address when using object NAT syntax. This is done by creating two objects with the same IP address like so:

ASA1(config)# object network HTTPS_SERVER ASA1(config-network-object)# host 192.168.3.1 ASA1(config-network-object)# nat (DMZ,OUTSIDE) static interface service tcp 443 443
ASA1(config)# object network SSH_SERVER ASA1(config-network-object)# host 192.168.3.1 ASA1(config-network-object)# nat (DMZ,OUTSIDE) static interface service tcp 22 22

Only one NAT statement can be assigned within an object, but you can create multiple objects using the same IP address.

Links:

https://forum.networklessons.com/t/cisco-asa-nat-port-forwarding/818/71?u=lagapides

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/firewall/asa-96-firewall-config/nat-basics.html#ID-2090-00000042