suschoud Thu, 03/08/2007 - 12:15
User Badges:
  • Gold, 750 points or more

outside--->inside communication :

on internet:

source ip( ip(

on asa's outside interface :

static (inside,outside)

as soon as this translation is processed ,the new packet is :

source ip( ip(

this packet is sent to inside interface as per static.

so,source ip never changed.

it was the destination which changed.


inside to outside communication :

inside( ip trying to access on internet.

inside interface :

source( ip(

nat (inside) 1

global (outside) 1 interface

on oustside interface

source ip (outside interface's pat address ).....dest. address (

so,source ip is changing here.

what say ?

eqocommunications Thu, 03/08/2007 - 16:41
User Badges:

The NAT statements are inline with what I'm running here. The issue I'm seeing is that as the SIP traffic from the outside Internet reaches the ASA5520, it's changing the SIP INVITE message from my outside address to my inside address.

Would this have anything to do with stateful inspection? I tried turning it off with creating a policy map inspect sip. But that doesn't seem to help.


This Discussion