Hi,
I'm having issues with static identity NAT on an ASA 5505.
We use VLAN 2 for the outside interface and VLAN1 for the inside. The outside WAN is connected to Eth 0/0 and the inside to Eth 0/1. Then we have created 1 to 1 static identity NAT statements for each of the two servers. However I'm now unsure how this will work
in terms of the VLAN configuration on the ASA. If we put the inside interface into VLAN2 we can ping the IPs of the servers however as they are in the same security level as the outside interface no filtering takes place, even when we remove "same-security-traffic inter-interface"
Then if we add the inside interface to VLAN 1 the connection breaks as traffic is not being routed between the VLANs
e.g.
interface Vlan2
nameif outside
security-level 0
ip address 1.1.1.1 255.255.255.0
!
interface Vlan1
nameif inside
security-level 100
no ip address
!
static (inside,outside) 1.1.1.2 1.1.1.2 netmask 255.255.255.255
static (inside,outside) 1.1.1.3 1.1.1.3 netmask 255.255.255.255
!
!
interface Ethernet0/0
description Outside Interface
switchport access vlan 2
speed 10
duplex full
!
!
interface Ethernet0/1
description Servers
switchport access vlan 2
!
access-list ouside blah......
Any ideas would help, thanks!
