Statically NAT DMZ Destinations based on Outside Source
Would like information or direction on a issue I face. On FWSM I have 3 interfaces. Outside, DMZ-A and DMZ-B I would like traffic from outside source IP 172.16.0.0 destined to 10.2.2.2 go to DMZ-A host 10.2.2.2. Then Traffic from 192.168.100.0 destined for 10.2.2.2 to go to translated host 10.2.2.2 really 10.20.20.20 behind DMZ-B. Normally this would be a static but since I need one range of source IPs to go to real 10.2.2.2 and the second range of IPs requesting 10.2.2.2 to go to the translated host 10.20.20.20. Do I need one static and a NAT ACL or two NAT ACLs.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...