ASA 5540 - NAT

Unanswered Question
May 13th, 2008

I have two inside Network and two outside, each on separate Interface.

I need double NAT: each inside Network to each outside Interface.

The configuration is as follow, but don't work:

(...)

global (OUTSIDE) 101 interface

global (ISP) 1 interface

nat (INSIDE) 0 access-list INSIDE_nat0_outbound

nat (INSIDE) 1 172.23.48.0 255.255.252.0

nat (INSIDE) 101 0.0.0.0 0.0.0.0

nat (RETE-GDP) 0 access-list INSIDE_nat0_outbound

nat (RETE-GDP) 1 GDP-LAN 255.255.192.0

(...)

access-list INSIDE_nat0_outbound extended permit ip any (...)

access-list INSIDE_nat0_outbound extended permit ip any GDP-LAN 255.255.192.0

(...)

Some idea?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
vabruno Mon, 05/19/2008 - 17:14

Looking at your nat config and if im reading your interfaces correctly it appears that you have a global 101 for interface (outside) and a global 1 for interface (ISP) if you initiate traffic from the inside interface from the 172.23.48.0 255.255.252.0 network it should be NAT'd to the outside IP of the (ISP) interface, is this working?

Actions

This Discussion