Translate Public Addresses to Private/s

smallrain_2 · ‎04-03-2008

Hi,

I have a ASA firewall with outside interface connected to Internet.

Public IPs are allowed to access Web server behind the firewall by redirecting it.

Everything works fine. But I would like to translate public(sources) IPs (not VIP for web server) to private IP address(es)?

How can I translate public IPs to a/group of Private IP address(es)?

Thanks,

Jon Marshall · ‎04-04-2008

nat (outside) 1 0.0.0.0

global (inside) 1 192.168.5.1

This would translate all outside address coming in to be 192.168.5.1.

If you have other public IP addresses coming in that you do not want to translate if they are not going to the web server

access-list webtraffic permit tcp any eq 80

nat (outside) 1 access-list webtraffic

global (inside) 1 192.168.5.1

Jon

smallrain_2 · ‎04-04-2008

Thank Jon. It works!!!

To be honest, this forum always give me solution better and faster than opening a TAC case or any other supports.

Jon Marshall · ‎04-04-2008

No problem, glad to be of help and thanks for the rating.

Jon