NAT Help

[cisconoobie]

Hi, I would like to make sure that when a user 10.0.0.1 accesses the internet, his IP is recorded as 209.1.1.1

Also, I would like if somebody access 209.1.1.1 then it would translate to the internal IP of 10.0.0.1

What would the NAT policy look like?

[alex.tulio]

you use static nat... static nat is a bi-directional nat... ur syntax would be like this.

static (outside,inside) 209.1.1.1 10.0.0.1 netmask 255.255.255.255

access-list access-out permit ip host 10.0.0.1 any (for outgoing traffic)

access-list access-in permit ip any host 209.1.1.1 (for incoming traffic, but only if u want this ip to be accessed outside and limit the ports open)

then apply it to the interfaces...

access-group access-out in interface inside

access-group access-in in interface outside