dynamic NAT from outside to inside

Answered Question
Dec 21st, 2008

Hello

Could you please let me know if it is possible to run the dynamic PAT on the FWSM module or ASA from the ouside to the inside interface, something like that:

nat (outside) 1 10.1.1.1 netmask 255.255.255.255

global (inside) 1 192.168.1.1

I tried to do that on my FWSM module but it seems not to work.

Thanks in advance

Regards

Lukas

I have this problem too.
0 votes
Correct Answer by Jon Marshall about 8 years 4 weeks ago

Lukas

I have used this on a pix and ASA before but not an FWSM but there is no reason why it should not work. One change to make in your config -

change

nat (outside) 1 10.1.1.1 netmask 255.255.255.255

to

nat (outside) 1 10.1.1.1 netmask 255.255.255.255 outside

ie. you need the keyword "outside" at the end of your nat statement.

Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
Jon Marshall Sun, 12/21/2008 - 05:20

Lukas

I have used this on a pix and ASA before but not an FWSM but there is no reason why it should not work. One change to make in your config -

change

nat (outside) 1 10.1.1.1 netmask 255.255.255.255

to

nat (outside) 1 10.1.1.1 netmask 255.255.255.255 outside

ie. you need the keyword "outside" at the end of your nat statement.

Jon

lukaszkhalil Sun, 12/21/2008 - 07:58

Hello

Is it possible that this nat with outside keyword can break the existing static (inside,outside)?

When I configure it, the dynamic NAT works but the static stops working.

Actions

This Discussion