09-29-2010 06:06 AM - edited 03-11-2019 11:47 AM
I am working on pilot project where there is the need for a host located in the inside interface of the ASA (private network - 192.168.0.0) to have access\exposed to the internet (cant use nat) The host would have assigned two public internet IP addresses (same public network as the asa outside interface). Can this even be possible without having to connect the host directly to the outside network ? if so, how do you configure the asa to forward traffic destine to the outside network and then out to the inside interface (two different networks - outside (public)\inside\private). Please let me know if someone has come across something similar.
Thanks,
marramix01
Solved! Go to Solution.
09-29-2010 06:13 AM
Either you use ASA in transparent mode or start to cheat the ASA into thinking that particular outside IP should be routed into inside (with identity NAT).
Or you put the host on DMZ and assign chunk of your "outside" IP subnet to DMZ.
Marcin
09-29-2010 06:13 AM
Either you use ASA in transparent mode or start to cheat the ASA into thinking that particular outside IP should be routed into inside (with identity NAT).
Or you put the host on DMZ and assign chunk of your "outside" IP subnet to DMZ.
Marcin
09-29-2010 08:38 AM
Thanks for the quick response. I am currently researching these options.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide