Configuring NAT on FWSM in Transparent Mode

gtickle · ‎12-18-2007

I'm having some trouble configuring NAT on FWSM on transparent mode. I think I have the NAT configuration right. but the firewall does not want to accept the packet from the upstream router.

I'm trying to nat 172.20.99.240 to 66.37.67.121

I have a route in my upstream router 66.37.67.121 to 172.20.99.4 (fwsm ip add)

Tracing route to natpool-0.citizenstv.coop [66.37.67.121]

over a maximum of 30 hops:

1 <1 ms <1 ms <1 ms ctclan1.citizens.local [10.10.10.1]

2 1 ms 1 ms 1 ms floyd-core2.swva.net [66.37.65.3]

3 <1 ms <1 ms <1 ms 66.37.64.130

4 1 ms 1 ms 1 ms 66.37.64.129

5 1 ms <1 ms <1 ms 66.37.64.130

6 1 ms 1 ms 1 ms 66.37.64.129

7 1 ms 1 ms 1 ms 66.37.64.130

Thank You

jbayuka · ‎12-27-2007

Refer to FWSM Basic Configuration Example for more information

http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00808b4d9f.shtml

mherald · ‎12-31-2007

Could you post your configs?

I am interested is seeing that the transparent firewall let you enter them (I have not tried it). NAT is an unsupported feature in a transparent firewall.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml#unsupp

Mike