Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

NAT doubt in ASA

Hi,

Is it possible to change the source IP and the target IP of the same  packet that arrived on any of the ASA interface? ( in this case outside )

For example if a packet is reveiced on outside I/F:

soure - a.b.c.d

destination : p.q.r.s

change the source and destination both

source  : a1.b1.c1.d1

Destination : p1.q1.r1.s1   and send it to inside interface.

When packet is retuned  replace the source and destination IP with the original IP and send it back to outside interface.

Is this possible. Any docuemnt or example on cisco.com.

Thanks in advance,

Subodh

1 ACCEPTED SOLUTION

Accepted Solutions
Gold

Re: NAT doubt in ASA

Hi Subodh,

You can setup something like this:

static (inside,outside) p.q.r.s p1.q1.r1.s1 netmask 255.255.255.255

static (outside,inside) a1.b1.c1.d1 a.b.c.d netmask 255.255.255.255

Hope that helps.

-Mike

3 REPLIES
Gold

Re: NAT doubt in ASA

Hi Subodh,

You can setup something like this:

static (inside,outside) p.q.r.s p1.q1.r1.s1 netmask 255.255.255.255

static (outside,inside) a1.b1.c1.d1 a.b.c.d netmask 255.255.255.255

Hope that helps.

-Mike

New Member

Re: NAT doubt in ASA

Hi,

Thanks for your prompt reply. Do we have any support document on cisco.com or an example on cisco.com that can show this situation.

Thanks,

Subodh

Gold

Re: NAT doubt in ASA

Hi Subodh,

Here is the configuration guide that shows how to do this with an example:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/nat_static.html#wp1064057

-Mike

235
Views
0
Helpful
3
Replies