cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1510
Views
0
Helpful
4
Replies

ASA Inbound PAT

p21
Level 1
Level 1

Does the ASA do inbound PAT on the outside public IP address?

4 Replies 4

Not applicable

PAT is performed with the outside interface address. This is especially useful when the outside interface address is not known beforehand, such as in a DHCP configuration.

http://www.cisco.com/warp/public/110/generic_ports.pdf

i think static PAT is what you're looking for. Be sure to use the keyword 'interface' as the external IP if you're PAT'ing the external interface IP.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/cfgnat.html#wp1043281

eg:

static (inside,outside) tcp interface 80 10.1.1.16 8080

Jon Marshall
Hall of Fame
Hall of Fame

Hi

Could you give an example of what you mean ?

Jon

micheljoh
Level 1
Level 1

Hi

Well not sure wha you meen but lets try answer ;)

if you meen trafic coming from outside into the inside network using the inside ip and PAT for the trafic you need to add the word outside at the end on the nat statement example:

nat (outside) 10 access-list specific-nets outside

global (inside) 10 interface

hope this will help you

Regards//Michel

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: