NAT Question

sonitadmin · ‎11-20-2007

Putting a new ASA 5505 in tomorrow. I have 3 machines that need to NAT to external IP's. If I enter the following commands will this work?

nat (inside) 0 access-list inside_nat0

nat (inside) 1 172.20.5.0 255.255.255.0

static (inside,outside) 10.17.16.10 172.20.5.200 netmask 255.255.255.255 0 0

Followed by the other two addresses. I'm not sure if this is what I need or not. Looking for some insight on the best way to set it up.

Thanks!

jwalker · ‎11-20-2007

Sonitadmin -

For external access like you describe, you need to have a NAT/global pair or statics. Below is an example of each. I am not sure why you added the nat 0 to the post, but I just want you to realize it is most like for VPN traffic.

NAT/Global

nat (inside) 1 192.168.1.0 255.255.255.0

global (outside) 1 172.16.2.0 255.255.255.240 OR global (outside) 1 interface

Statics

static (inside,outside) 172.16.1.0 192.168.1.0 netmask 255.255.255.240

OR

static (inside,outside) 172.16.1.1 192.168.1.1

static (inside,outside) 172.16.1.2 192.168.1.2

etc

Please let me know if you have any more questions.

Jay

Please rate if this helps..