Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA routing question

I curious if a asa (v7.0.7) can route traffic in and out sub interfaces. Please see the attached diagram. Our ISP is handing off a 802.1q tagged ethernet connection to us. One vlan is for internet connectivity and the other is for a private lan. We have the private lan working correctly with no nat. I'll like to route all internet traffic from the 172.30.1.x network through the asa and out to the internet using 4.2.2.2 as the pat address (of course this is not the real address for this discussion) I'd also like to route traffic from the 172.31.255.x network through the asa to the 172.30.1.x network.

thanks

1 ACCEPTED SOLUTION

Accepted Solutions

Re: ASA routing question

Maybe I'm missing something, why not just PAT as normal on the 'outside' interface?

6 REPLIES

Re: ASA routing question

Sure, you can do that. Here's a link with an example configuration. You'll need to adjust your security levels from the example.

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cbecc2e/0#selected_message

HTH and please rate.

New Member

Re: ASA routing question

Is there anywhere to cover the nat/pat out the outside interface?

Re: ASA routing question

Maybe I'm missing something, why not just PAT as normal on the 'outside' interface?

New Member

Re: ASA routing question

I found I had a no nat statement on the interface in question. Now I'd like to put a ACL on the interface to restrict both inbound and outbound traffic but I'm having a problem getting to work as I'd expect.

Re: ASA routing question

OK, lets take a look at them. Now one thing with the ASA that differs from the PIX is that ACL's can be applied inbound or outbound. For simplicity I always apply them inbound. Can you post a line two each way and we'll dissect them?

New Member

Re: ASA routing question

I think I'm all set now. Not sure what was going on. The strange thing is I never see a entry in the xlate table for a 172.31.253.x address to my pat address though everything is working just fine. Can anyone explain this?

117
Views
2
Helpful
6
Replies