Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA 5540 - NAT

I have two inside Network and two outside, each on separate Interface.

I need double NAT: each inside Network to each outside Interface.

The configuration is as follow, but don't work:

(...)

global (OUTSIDE) 101 interface

global (ISP) 1 interface

nat (INSIDE) 0 access-list INSIDE_nat0_outbound

nat (INSIDE) 1 172.23.48.0 255.255.252.0

nat (INSIDE) 101 0.0.0.0 0.0.0.0

nat (RETE-GDP) 0 access-list INSIDE_nat0_outbound

nat (RETE-GDP) 1 GDP-LAN 255.255.192.0

(...)

access-list INSIDE_nat0_outbound extended permit ip any (...)

access-list INSIDE_nat0_outbound extended permit ip any GDP-LAN 255.255.192.0

(...)

Some idea?

2 REPLIES
Silver

Re: ASA 5540 - NAT

Use this Cisco ASA 5500 Series Adaptive Security Appliances Configuration guide for NAT configuration on ASA 5540.

http://www.cisco.com/en/US/products/ps6120/tsd_products_support_configure.html

New Member

Re: ASA 5540 - NAT

Looking at your nat config and if im reading your interfaces correctly it appears that you have a global 101 for interface (outside) and a global 1 for interface (ISP) if you initiate traffic from the inside interface from the 172.23.48.0 255.255.252.0 network it should be NAT'd to the outside IP of the (ISP) interface, is this working?

1246
Views
0
Helpful
2
Replies