09-07-2007 04:22 AM - edited 02-21-2020 01:40 AM
Does the ASA do inbound PAT on the outside public IP address?
09-13-2007 05:46 AM
PAT is performed with the outside interface address. This is especially useful when the outside interface address is not known beforehand, such as in a DHCP configuration.
09-13-2007 06:25 AM
i think static PAT is what you're looking for. Be sure to use the keyword 'interface' as the external IP if you're PAT'ing the external interface IP.
http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/cfgnat.html#wp1043281
eg:
static (inside,outside) tcp interface 80 10.1.1.16 8080
09-13-2007 06:28 AM
Hi
Could you give an example of what you mean ?
Jon
09-13-2007 10:09 PM
Hi
Well not sure wha you meen but lets try answer ;)
if you meen trafic coming from outside into the inside network using the inside ip and PAT for the trafic you need to add the word outside at the end on the nat statement example:
nat (outside) 10 access-list specific-nets outside
global (inside) 10 interface
hope this will help you
Regards//Michel
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: