cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
521
Views
0
Helpful
3
Replies

NAT doubt in ASA

bapatsubodh
Level 1
Level 1

Hi,

Is it possible to change the source IP and the target IP of the same  packet that arrived on any of the ASA interface? ( in this case outside )

For example if a packet is reveiced on outside I/F:

soure - a.b.c.d

destination : p.q.r.s

change the source and destination both

source  : a1.b1.c1.d1

Destination : p1.q1.r1.s1   and send it to inside interface.

When packet is retuned  replace the source and destination IP with the original IP and send it back to outside interface.

Is this possible. Any docuemnt or example on cisco.com.

Thanks in advance,

Subodh

1 Accepted Solution

Accepted Solutions

mirober2
Cisco Employee
Cisco Employee

Hi Subodh,

You can setup something like this:

static (inside,outside) p.q.r.s p1.q1.r1.s1 netmask 255.255.255.255

static (outside,inside) a1.b1.c1.d1 a.b.c.d netmask 255.255.255.255

Hope that helps.

-Mike

View solution in original post

3 Replies 3

mirober2
Cisco Employee
Cisco Employee

Hi Subodh,

You can setup something like this:

static (inside,outside) p.q.r.s p1.q1.r1.s1 netmask 255.255.255.255

static (outside,inside) a1.b1.c1.d1 a.b.c.d netmask 255.255.255.255

Hope that helps.

-Mike

Hi,

Thanks for your prompt reply. Do we have any support document on cisco.com or an example on cisco.com that can show this situation.

Thanks,

Subodh

Hi Subodh,

Here is the configuration guide that shows how to do this with an example:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/nat_static.html#wp1064057

-Mike

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: