probably a real simple question: I have a router-ASA combination. The router's WAN interface has a public IP 220.127.116.11 and there is a small stub 192.168.1.x network in between the router and the ASA and finally the web server at 172.16.1.16 I've never done double-NAT before and I can't think of any reason that it shouldn't work, but I thought I'd do a quick post here to see if the standard NAT work should across the two devices to get to an IP on the inside LAN of the ASA? (I know it would be easier to change the ASA to be in transparent mode and not do double NAT at all, but I'm not allowed to do that)
On the router, I'll have:
ip nat inside source static tcp 192.168.1.2 80 18.104.22.168 80 extendable
On the ASA, I'll have:
static (inside,outside) tcp 192.168.1.2 www 172.16.1.16 www netmask 255.255.255.255
Will this work?
Any "gotchas" that I need to know about?