Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

Cisco ASA/PIX NAT

Hi ALL,

I need to do Many to many nat in the below manner

EX:

192.168.1.0/24 ----- 172.168.1.0/24

Nat sould be if 192.168.1.1 - 172.16.1.1

                       192.168.1.2 -172.16.1.2

                       

It should not change if 192.168.1.1 always need to goto 172.16.1.1 and so on

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Cisco ASA/PIX NAT

Hello Jose,

In case that you need to translate the 192.168.1.0/24 network to 172.16.1.0/24 whenever they are going to an address routable on the outside interface, you would need the following configuration line:

static (inside,outside) 172.16.1.0 192.168.1.0 netmask 255.255.255.0

In that rule, inside is the real interface and outside is the mapped interface; 172.16.1.0 is the mapped address and 192.168.1.0 is the real address.

Each address of the 192.168.1.0/24 would be statically translated to 172.16.1.0/24

Let me know if that helps.

5 REPLIES
New Member

Cisco ASA/PIX NAT

Hi,

It should be static ,shouldn't change will it work with

static(inside,outside) x.x.x.x x.x.x.x

Cisco ASA/PIX NAT

Do you mean to say when communication is between -

192.168.1.0/24  & 172.168.1.0/24

192.168.1.0/24 should not get natted ? then answer is use no nat.

If you mean to say when communication in between and 192.168.1.0/24 should be natted then use policy-nat.

Thanks

Ajay

New Member

Cisco ASA/PIX NAT

Hi Thanks   for your replay,

I will be comminicating to 192.168.1.0/24  so it has to  natted  172.16.1.0/24 - this is orginal network which exist

An access attempt to say 192.168.1.10 it should always nated to  172.16.1.10,

if 192.168.1.25 --172.16.1.25 and so on ..

New Member

Cisco ASA/PIX NAT

Hello Jose,

In case that you need to translate the 192.168.1.0/24 network to 172.16.1.0/24 whenever they are going to an address routable on the outside interface, you would need the following configuration line:

static (inside,outside) 172.16.1.0 192.168.1.0 netmask 255.255.255.0

In that rule, inside is the real interface and outside is the mapped interface; 172.16.1.0 is the mapped address and 192.168.1.0 is the real address.

Each address of the 192.168.1.0/24 would be statically translated to 172.16.1.0/24

Let me know if that helps.

New Member

Cisco ASA/PIX NAT

Sorry in delay

Thanks for your support

415
Views
0
Helpful
5
Replies
CreatePlease to create content