Global Nat on Cisco ASA

Unanswered Question
Feb 5th, 2009

HJi,

<br />I've a Cisco ASA with software 8.0(3).

<br />I've PC behind ASA (say for example 254 hosts on interface inside); I want to do global nat on interface outside with two adddresses (say for example 100.100.100.100 and 100.100.100.101).

<br />The instructions that I have used are:

<br />nat (inside) 1 10.0.0.0 255.255.255.0

<br />global (outside)1 100.100.100.100-100.100.100.101

<br />

<br />I want that the first PC is global natted (patted) with 100.100.100.100, the second with 100.100.100.101, the third with 100.100.100.100...but the instructions above are not working...in other words i want that the ip of inside interface are alternately natted with the two addresses, and that all host simultaneously are natted on outside interface.

<br />Has anybody an idea?

<br />

<br />Thank you.

<br />Best regards,

<br />Massimiliano.

<br />

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
RAMACHANDRA R Thu, 02/05/2009 - 05:32

Hi,

If you want to enable internet only for 2 ip address u can use the following commands

natnat (inside) 1 100.100.100.100 255.255.255.255

nat (inside) 1 100.100.100.101 255.255.255.255

global (outside) 1 interface

global (outside) 1 XX.XXX.XXX.XX ( Ip address)

subsequently you can keep adding the host those who wants to access internet.

Regards

Rama

Actions

This Discussion