Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Some NAT questions PIX/ASA

Hi,

I want to NAT an inside local subnet (172.1.0.0) to inside global (172.2.0.0) when going to 10.1.0.0 but I need the hosts to keep the same address after translation...how would I accomplish this?

global (inside) 8 172.2.0.0-172.2.255.255 netmask 255.255.0.0

nat (inside) 8 access-list nat1

access-list nat1 permit ip 172.1.0.0 255.255.0.0 10.1.0.0 255.255.0.0

I'm not sure how to keep the same host address.

Also, would this work for incoming traffic translations also, or is this just for outgoing traffic?

Any help would be much appreciated!!

Thanks,

J

2 REPLIES
Gold

Re: Some NAT questions PIX/ASA

change "global (inside) 8..." to "global (outside) 8..."

everything else looks good. however, this is only for outgoing NAT. This won't allow incoming connections (aside from return traffic).

New Member

Re: Some NAT questions PIX/ASA

Hi,

Thank you for getting back to me. Actually I finally figured that what I needed was a static entry with an ACL, as this also works for incoming translations (and keeps host address the same).

Cheers,

J

97
Views
3
Helpful
2
Replies