cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
349
Views
5
Helpful
3
Replies

dynamic NAT from outside to inside

lukaszkhalil
Level 1
Level 1

Hello

Could you please let me know if it is possible to run the dynamic PAT on the FWSM module or ASA from the ouside to the inside interface, something like that:

nat (outside) 1 10.1.1.1 netmask 255.255.255.255

global (inside) 1 192.168.1.1

I tried to do that on my FWSM module but it seems not to work.

Thanks in advance

Regards

Lukas

1 Accepted Solution

Accepted Solutions

Jon Marshall
Hall of Fame
Hall of Fame

Lukas

I have used this on a pix and ASA before but not an FWSM but there is no reason why it should not work. One change to make in your config -

change

nat (outside) 1 10.1.1.1 netmask 255.255.255.255

to

nat (outside) 1 10.1.1.1 netmask 255.255.255.255 outside

ie. you need the keyword "outside" at the end of your nat statement.

Jon

View solution in original post

3 Replies 3

Jon Marshall
Hall of Fame
Hall of Fame

Lukas

I have used this on a pix and ASA before but not an FWSM but there is no reason why it should not work. One change to make in your config -

change

nat (outside) 1 10.1.1.1 netmask 255.255.255.255

to

nat (outside) 1 10.1.1.1 netmask 255.255.255.255 outside

ie. you need the keyword "outside" at the end of your nat statement.

Jon

Hi

Thanks it works !

Lucas

Hello

Is it possible that this nat with outside keyword can break the existing static (inside,outside)?

When I configure it, the dynamic NAT works but the static stops working.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: