Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

NAT Help

Hi, I would like to make sure that when a user 10.0.0.1 accesses the internet, his IP is recorded as 209.1.1.1

Also, I would like if somebody access 209.1.1.1 then it would translate to the internal IP of 10.0.0.1

What would the NAT policy look like?

1 REPLY
New Member

Re: NAT Help

you use static nat... static nat is a bi-directional nat... ur syntax would be like this.

static (outside,inside) 209.1.1.1 10.0.0.1 netmask 255.255.255.255

access-list access-out permit ip host 10.0.0.1 any (for outgoing traffic)

access-list access-in permit ip any host 209.1.1.1 (for incoming traffic, but only if u want this ip to be accessed outside and limit the ports open)

then apply it to the interfaces...

access-group access-out in interface inside

access-group access-in in interface outside

108
Views
0
Helpful
1
Replies
CreatePlease to create content