Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Pat a source address when access a inside host on asa

Hello, in a situation like this:

Outside 10.1.1.1

Cisco ASA

Inside 192.168.1.1

|

LAN 192.168.1.0/24

I know how to do a PAT to forward incoming packets to an inside host:

static (inside,outside) 10.1.1.2 192.168.1.2 netmask 255.255.255.255

access-list OUTSIDE extended permit tcp any host 10.1.1.2 eq www

access.group OUTSIDE in interface outside

I need to do a source nat of the incoming packets so the inside host sees ip 192.168.1.1 as source ip (or another IP address 192.168.1.0/24) Is it possible? Best regards

Aondio Carlo

Everyone's tags (4)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Pat a source address when access a inside host on asa

Sure can.

access-list nat-inside permit ip any host 10.1.1.2

nat (outside) 5 access-list nat-inside outside

global (inside) 5 interface

And "clear xlate" after the above config.

Hope that helps.

3 REPLIES
Cisco Employee

Re: Pat a source address when access a inside host on asa

Sure can.

access-list nat-inside permit ip any host 10.1.1.2

nat (outside) 5 access-list nat-inside outside

global (inside) 5 interface

And "clear xlate" after the above config.

Hope that helps.

New Member

Re: Pat a source address when access a inside host on asa

Hy, Jennifer

i have test your solution and all is ok

Many thanks

Best regards

Aondio Carlo

Cisco Employee

Re: Pat a source address when access a inside host on asa

Thanks for the update and rating.

335
Views
0
Helpful
3
Replies
CreatePlease to create content