will the following NAT config on an ASA conflict?
First part is for one to one NAT for inside address 172.16.1.1
static (inside,outside) 192.168.1.1 172.16.1.1 netmask 255.255.255.255
access-list outside_in permit tcp host 10.10.10.10 host 192.168.1.1
following is an exception for the one to one NAT. I have a host on the outside that needs to access the inside host 172.16.1.1, but they cannot use 192.168.1.1 as the destination. So here was what I proposed:
access-list nat-exception permit ip host 172.16.1.1 host 209.x.x.x
static (inside,outside) 172.32.1.1
access-list nat-exception
access-list outside_in permit tcp host 209.x.x.x host 172.32.1.1
basically I have a static NAT already in place, but have a new customer coming in that needs to access the same internal address via an address that is not the already defined static statement so I was wondering if the static with the access-list would be a workaround without conflicting with or affecting the one to one NAT? I'm guessing the one to one NAT trumps my idea. If anyone has any idea on how I can make this work please advise. Thanks