Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA: temporarily rewrite destination IP

Hello:

We have an internal application (Server-A) that has a hardcoded IP for LDAP lookups. The LDAP server is also internal, but on a different interface/VLAN of the ASA. The LDAP server (LDAP-A) is experiencing problems, and I would like to temporarily redirect LDAP (tcp/389) lookups from Server-A to LDAP-B. We can't change the destination IP in Server-A's configuration. LDAP-A and LDAP-B are on the same subnet.

Normal traffic flow looks like this:

Server-A -> ASA int 1 -> ASA int 2 -> LDAP-A

I somehow need ASA int 1 to see LDAP-A's destination address and rewrite it to LDAP-B's IP. Is this possible?

Thanks,

Mark

1 REPLY

Re: ASA: temporarily rewrite destination IP

try this:

static (int2,int1) tcp LDAP-A-IP 389 LDAP-B-IP 389

Or if you would like to do static policy NAT.

static (int2,int1) tcp LDAP-A-IP 389 access-list TEST

access-list TEST permit tcp LDAP-B-IP eq 389 Server-A-IP

197
Views
0
Helpful
1
Replies