cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
692
Views
0
Helpful
1
Replies

Reverse NAT

bhenrich
Level 1
Level 1

Hi All,

I've got an interesting situation trying to get NAT working properly with a Cisco ASA 5510.

The Outside interface of the ASA is set as a public routable assigned to us by our ISP. Our ISP also routes several other networks (3 class C networks) to us. What I need to do is to NAT all of the IPs in these additional subnets to one single IP on the internal network.

Some other details:

Internal Network: 10.1.1.0/24

Internal Host (CSS11501): 10.1.1.65

ASA Inside Interface IP: 10.1.1.1

ASA Outside Interface IP: 207.67.38.17

ASA Outside Network: 207.67.38.16/29

Additional Networks: 164.110.112.0/24, 164.110.113.0/24, 207.74.12.0/24

NB: Networks/IPs have been changed to protect the innocent.

I have tried implementing the above with dynamic NAT rules with the "real" IPs on the outside interface and a single-IP NAT pool on the inside interface, but it doesn't seem to be working.

Any pointers on how I can achieve such a setup with a Cisco ASA5510?

1 Reply 1

Jon Marshall
Hall of Fame
Hall of Fame

Hi

Could you post relevant config. I would have thought the following should work

nat (outside) 1 164.110.112.0 255.255.255.0 outside

nat (outside) 1 164.110.113.0 255.255.255.0 outside

nat (outside) 1 207.74.12.0 255.255.255.0 outside

global (inside) 1 "ip address"

Jon

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: