Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Help ASA NAT 8.3

Dear  all,

i have this problem.

I need to nat for navigation all private ip address that arrive to the inside interface of the ASA to a specific ip address to internet.

The inside interface have address 10.10.10.1

The IP address that arrive to the inside interface are from 10.10.10.x 10.0.10.x 172.16.0.x and 192.168.0.x. I need to nat with ip address of the outiside interface of the ASA.

ANY internal ip -----> 212.9.9.9 nat with outside ip address interface.

i perform this configuration, is this config correct?

object network out-serv

host 212.9.9.9

object-group network DM_INLINE_NETWORK_4

network-object object out-serv

nat (inside,outside1) source dynamic any interface destination static DM_INLINE_NETWORK_4 DM_INLINE_NETWORK_4

thanks  a lot regards

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Red

Help ASA NAT 8.3

If you just want to restrict it for a specific internet IP, then your Nat statement is absoultely correct:

nat (inside,outside1) source dynamic any interface destination static DM_INLINE_NETWORK_4 DM_INLINE_NETWORK_4

Thanks,
Varun Rao
Security Team,
Cisco TAC

Thanks, Varun Rao Security Team, Cisco TAC
4 REPLIES
Red

Help ASA NAT 8.3

Hi,

Your nat should just be:

nat (inside,outside1) source dynamic any interface

and this would nat all the traffic coming from inside interface and going to internet to the outside interface of the ASA.

Thanks,
Varun Rao
Security Team,
Cisco TAC

Thanks, Varun Rao Security Team, Cisco TAC
New Member

Help ASA NAT 8.3

Thanks,

but if i want to restrict the nat to an exactly destination 212.9.9.9

so i want that all the inside networks are translated with the outside interface when try to contact this pubblic ip address 212.9.9.9

thanks a lot best regards

Red

Help ASA NAT 8.3

If you just want to restrict it for a specific internet IP, then your Nat statement is absoultely correct:

nat (inside,outside1) source dynamic any interface destination static DM_INLINE_NETWORK_4 DM_INLINE_NETWORK_4

Thanks,
Varun Rao
Security Team,
Cisco TAC

Thanks, Varun Rao Security Team, Cisco TAC
New Member

Help ASA NAT 8.3

thanks a lot

regards

415
Views
0
Helpful
4
Replies
CreatePlease login to create content