Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Simple NAT of inside interface from outside

Just when I think I've got my head around nat, global and static commands i find myself struggling to get this 'simple' config working...

I have a pretty default config:

interface Vlan1

nameif inside

security-level 100

ip address 10.20.30.50 255.255.255.0

!

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

static (inside,outside) 10.20.30.0 10.20.30.0 netmask 255.255.255.0

I can ping from inside host to outside host and vice versa.

All i want to change is to NAT all traffic coming from the outside network on the inside interface so if i start to ping a host on the inside network from the outside, the traffic appears to come from 10.20.30.50 (my inside interface IP).

I'd appreciate any help.

1 ACCEPTED SOLUTION

Accepted Solutions

Simple NAT of inside interface from outside

Hello Eshan,

You will need to do

global (inside) 1 interface

nat (outside) 1 0 0 outside

Do no forget the outside keyword at the end.

Also you will need to allow the traffic via an ACL on the outside interface

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
1 REPLY

Simple NAT of inside interface from outside

Hello Eshan,

You will need to do

global (inside) 1 interface

nat (outside) 1 0 0 outside

Do no forget the outside keyword at the end.

Also you will need to allow the traffic via an ACL on the outside interface

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
269
Views
1
Helpful
1
Replies
CreatePlease to create content