I have the need to NAT an inside address (DMZ acutally) to two different outside addresses- one outside address is just for internet access, the other one is a NATed address on a VPN L2L tunnel.
So I want 10.10.10.1 to translate to 192.168.1.1 if going through the L2L tunnel and destined to the 172.16.0.0 network (tunnel terminated on outside interface), but I want it to translate to my public address 126.96.36.199 if going out to internet (outside).
I've tried using access lists for the second VPN tunnel static entry but get a "duplicate static entry" message when entering the static command.
I tested above in 7.x version. I got "INFO: overlap with existing static" message but both commands were taken in config. ASA/PIX will check policy static NAT first, therefore, there is no conflict here.
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...