Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NAT Question

Putting a new ASA 5505 in tomorrow. I have 3 machines that need to NAT to external IP's. If I enter the following commands will this work?

nat (inside) 0 access-list inside_nat0

nat (inside) 1 172.20.5.0 255.255.255.0

static (inside,outside) 10.17.16.10 172.20.5.200 netmask 255.255.255.255 0 0

Followed by the other two addresses. I'm not sure if this is what I need or not. Looking for some insight on the best way to set it up.

Thanks!

1 REPLY
Silver

Re: NAT Question

Sonitadmin -

For external access like you describe, you need to have a NAT/global pair or statics. Below is an example of each. I am not sure why you added the nat 0 to the post, but I just want you to realize it is most like for VPN traffic.

NAT/Global

nat (inside) 1 192.168.1.0 255.255.255.0

global (outside) 1 172.16.2.0 255.255.255.240 OR global (outside) 1 interface

Statics

static (inside,outside) 172.16.1.0 192.168.1.0 netmask 255.255.255.240

OR

static (inside,outside) 172.16.1.1 192.168.1.1

static (inside,outside) 172.16.1.2 192.168.1.2

etc

Please let me know if you have any more questions.

Jay

Please rate if this helps..

89
Views
0
Helpful
1
Replies