12-21-2008 03:37 AM - edited 03-11-2019 07:28 AM
Hello
Could you please let me know if it is possible to run the dynamic PAT on the FWSM module or ASA from the ouside to the inside interface, something like that:
nat (outside) 1 10.1.1.1 netmask 255.255.255.255
global (inside) 1 192.168.1.1
I tried to do that on my FWSM module but it seems not to work.
Thanks in advance
Regards
Lukas
Solved! Go to Solution.
12-21-2008 05:20 AM
Lukas
I have used this on a pix and ASA before but not an FWSM but there is no reason why it should not work. One change to make in your config -
change
nat (outside) 1 10.1.1.1 netmask 255.255.255.255
to
nat (outside) 1 10.1.1.1 netmask 255.255.255.255 outside
ie. you need the keyword "outside" at the end of your nat statement.
Jon
12-21-2008 05:20 AM
Lukas
I have used this on a pix and ASA before but not an FWSM but there is no reason why it should not work. One change to make in your config -
change
nat (outside) 1 10.1.1.1 netmask 255.255.255.255
to
nat (outside) 1 10.1.1.1 netmask 255.255.255.255 outside
ie. you need the keyword "outside" at the end of your nat statement.
Jon
12-21-2008 05:41 AM
Hi
Thanks it works !
Lucas
12-21-2008 07:58 AM
Hello
Is it possible that this nat with outside keyword can break the existing static (inside,outside)?
When I configure it, the dynamic NAT works but the static stops working.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: