topic Re: Many to one - NAT in ASA in Network Security

Many to one - NAT in ASA

b-cunningham — Mon, 11 Mar 2019 09:13:17 GMT

I have a requirement to allow 11 internal hosts to access an FTP server through a site to site VPN tunnel. The other side wants to see a public IP address that is not the peer address (outside interface). I?ve been unable to make a NAT that will translate multiple IP?s to a single outside address. Is this possible on an ASA5520, and if so can you point me in the right direction?

Re: Many to one - NAT in ASA

Collin Clark — Wed, 27 Dec 2006 21:30:55 GMT

You will need to use policy nat, probably with an ACL. This link should help.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00800b6e1a.shtml

Re: Many to one - NAT in ASA

Fernando_Meza — Wed, 27 Dec 2006 23:41:38 GMT

Hi .. you need to use PAT with an access-list

i.e

nat (inside) 10 access-list FTP_Access

access-list FTP_Access extended permit tcp eq ftp

global (outside) 10 netmask 255.255.255.255

You also need to make sure you allow that access on any access list applied to the inside interface .. now I am not sure whether you will be able to get this traffic throught the VPN tunnel ..

I hope it helps .. please rate it if it does !!!

Re: Many to one - NAT in ASA

b-cunningham — Wed, 10 Jan 2007 00:01:58 GMT

Thank you. That's just what I needed.

Re: Many to one - NAT in ASA

b-cunningham — Wed, 10 Jan 2007 00:04:23 GMT

Thank you. This document was also very informative.