dynamic NAT from outside to inside

Answered Question
Dec 21st, 2008
User Badges:

Hello


Could you please let me know if it is possible to run the dynamic PAT on the FWSM module or ASA from the ouside to the inside interface, something like that:


nat (outside) 1 10.1.1.1 netmask 255.255.255.255

global (inside) 1 192.168.1.1


I tried to do that on my FWSM module but it seems not to work.


Thanks in advance


Regards


Lukas

Correct Answer by Jon Marshall about 8 years 5 months ago

Lukas


I have used this on a pix and ASA before but not an FWSM but there is no reason why it should not work. One change to make in your config -


change


nat (outside) 1 10.1.1.1 netmask 255.255.255.255


to


nat (outside) 1 10.1.1.1 netmask 255.255.255.255 outside


ie. you need the keyword "outside" at the end of your nat statement.


Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
Jon Marshall Sun, 12/21/2008 - 05:20
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Lukas


I have used this on a pix and ASA before but not an FWSM but there is no reason why it should not work. One change to make in your config -


change


nat (outside) 1 10.1.1.1 netmask 255.255.255.255


to


nat (outside) 1 10.1.1.1 netmask 255.255.255.255 outside


ie. you need the keyword "outside" at the end of your nat statement.


Jon

lukaszkhalil Sun, 12/21/2008 - 07:58
User Badges:

Hello


Is it possible that this nat with outside keyword can break the existing static (inside,outside)?


When I configure it, the dynamic NAT works but the static stops working.



Actions

This Discussion