Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

p21
New Member

ASA Inbound PAT

Does the ASA do inbound PAT on the outside public IP address?

  • Other Security Subjects
4 REPLIES
Anonymous
N/A

Re: ASA Inbound PAT

PAT is performed with the outside interface address. This is especially useful when the outside interface address is not known beforehand, such as in a DHCP configuration.

http://www.cisco.com/warp/public/110/generic_ports.pdf

Gold

Re: ASA Inbound PAT

i think static PAT is what you're looking for. Be sure to use the keyword 'interface' as the external IP if you're PAT'ing the external interface IP.

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/cfgnat.html#wp1043281

eg:

static (inside,outside) tcp interface 80 10.1.1.16 8080

Hall of Fame Super Blue

Re: ASA Inbound PAT

Hi

Could you give an example of what you mean ?

Jon

New Member

Re: ASA Inbound PAT

Hi

Well not sure wha you meen but lets try answer ;)

if you meen trafic coming from outside into the inside network using the inside ip and PAT for the trafic you need to add the word outside at the end on the nat statement example:

nat (outside) 10 access-list specific-nets outside

global (inside) 10 interface

hope this will help you

Regards//Michel

765
Views
0
Helpful
4
Replies