Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Cisco Employee

Identity Static NAT

I configured identity static NAT on my ASA specifying a range I.E. "static (inside,outside) 10.10.10.0 10.10.10.0 netmask 255.255.255.0 and now the outside users cannot connect to inside WEB server which has IP address of 10.10.10.51. Do I need to create one to one entries for each host? Seems like firewall does not create a dedicated translation for inbound connections.

2 REPLIES
New Member

Re: Identity Static NAT

Hi,

There is no need for doing one to one nat for all the ip addresses. The configuration statement looks fine to me.

Please check the output of 'show xlate' and find out if the translations are being made for the ip addresses.

Thanks,

Manish

New Member

Re: Identity Static NAT

The order of the statics is important. Check the order.

172
Views
0
Helpful
2
Replies
CreatePlease to create content