topic Re: Cisco ASA NAT in Network Security

Cisco ASA NAT

Mohammed.Fawzi — Wed, 20 Sep 2023 09:41:58 GMT

i have an issue with nat i need to solve

i have two servers that they are natted to two public IPs

let say 192.168.1.1 to 1.1.1.1

192.168.1.2 to 1.1.1.2

i want them they can connect to each other by public IPs

when 192.168.1.1 pings to 1.1.1.2 there is no reply

how can i do this in my senario

Re: Cisco ASA NAT

MHM Cisco World — Wed, 20 Sep 2023 09:50:09 GMT

Nat(in'in) source static 192.168.1.1 1.1.1.1 destiantion static 192.168.1.2 to 1.1.1.2

This what you need

Re: Cisco ASA NAT

Mohammed.Fawzi — Thu, 21 Sep 2023 07:52:14 GMT

But I want the destination 1.1.1.2 not 192.168.1.2

the problem is when the two public IPs from same range block NATed on the same firewall interface they can't communicate normally if you get my idea

thanks for your attention

Re: Cisco ASA NAT

MHM Cisco World — Thu, 21 Sep 2023 08:10:19 GMT

The source and destination will NAT with command I share above.

Re: Cisco ASA NAT

Sheraz.Salim — Thu, 21 Sep 2023 09:06:08 GMT

nat (inside,inside) source static 192.168.1.1 1.1.1.1 destination static 1.1.1.2 192.168.1.2 no-proxy-arp nat (inside,inside) source static 192.168.1.2 1.1.1.2 destination static 1.1.1.1 192.168.1.1 no-proxy-arp ! ! access-list inside_access_in extended permit icmp host 192.168.1.1 host 1.1.1.2 access-list inside_access_in extended permit icmp host 192.168.1.2 host 1.1.1.1 ! ! access-group inside_access_in in interface inside

object network Server1_Internal host 192.168.1.1 nat (inside,outside) static 1.1.1.1 ! object network Server2_Internal host 192.168.1.2 nat (inside,outside) static 1.1.1.2 ! access-list outside_access_in extended permit icmp host 1.1.1.1 host 1.1.1.2 access-list outside_access_in extended permit icmp host 1.1.1.2 host 1.1.1.1 !