NAT Question

Unanswered Question
Nov 20th, 2007
User Badges:

Putting a new ASA 5505 in tomorrow. I have 3 machines that need to NAT to external IP's. If I enter the following commands will this work?


nat (inside) 0 access-list inside_nat0

nat (inside) 1 172.20.5.0 255.255.255.0

static (inside,outside) 10.17.16.10 172.20.5.200 netmask 255.255.255.255 0 0


Followed by the other two addresses. I'm not sure if this is what I need or not. Looking for some insight on the best way to set it up.


Thanks!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Sonitadmin -


For external access like you describe, you need to have a NAT/global pair or statics. Below is an example of each. I am not sure why you added the nat 0 to the post, but I just want you to realize it is most like for VPN traffic.


NAT/Global


nat (inside) 1 192.168.1.0 255.255.255.0

global (outside) 1 172.16.2.0 255.255.255.240 OR global (outside) 1 interface


Statics


static (inside,outside) 172.16.1.0 192.168.1.0 netmask 255.255.255.240


OR


static (inside,outside) 172.16.1.1 192.168.1.1


static (inside,outside) 172.16.1.2 192.168.1.2


etc


Please let me know if you have any more questions.


Jay


Please rate if this helps..

Actions

This Discussion