topic Hello, in Network Security

Forward outgoing traffic

filip00011 — Tue, 12 Mar 2019 08:42:21 GMT

I want to achieve this:

When user from Inside subnet goes to the IP 46.253.96.18 I want him to redirect to the IP 195.113.165.19

I have got this

object network SPSE
host 195.113.165.19
object network webmail
host 46.253.96.18

nat (DMZ,outside) source static any any destination static webmail SPSE

The end result is that neither page works.

Hi,

MANI .P — Mon, 26 Dec 2016 05:44:15 GMT

Hi,

#object network MyDMZinside

#subnet 10.10.10.0 255.255.255.0

#object network 195_113_IP

#host 195.113.165.19

#object network 46_253_IP

#host 46.253.96.18

#nat (dmz,outside) source dynamic MyDMZinside 195_113_IP dynamic static 46_253_IP 46_253_IP

(10.10.10.0 255.255.255.0 ) ----------> ( Change as 195.113.165.19)------> (when goes to 46.253.96.18)

Rate if this helps you.

Thanks ,

Mani

The config looks good. Could

Ajay Saini — Mon, 26 Dec 2016 07:09:38 GMT

The config looks good. Could you please run a packet-tracer command and share the result. I believe that the issue is because we need a public ip mapping for the source while going to internet.

Try below:

nat (DMZ,outside) source dynamic any interface destination static webmail SPSE

so the forwarding works, but

filip00011 — Mon, 26 Dec 2016 18:26:30 GMT

so the forwarding works, but I cannot go to the "allowed page directly" is there any way around?

Well, that should work if we

Ajay Saini — Mon, 26 Dec 2016 18:49:14 GMT

Well, that should work if we have another NAT statement something like below:

nat (DMZ,outside) source dynamic any interface destination static x x

where x would be the ip address of the destination which you need to access. You need the real ip address here.

Let me know if it helps.

HTH
-

THX it works. Is there any

filip00011 — Mon, 26 Dec 2016 21:05:18 GMT

THX it works. Is there any article which would explain this topic. I'm not really sure between the difference of NAT in global config compared to under an object network.

Hello,

Ajay Saini — Tue, 27 Dec 2016 06:06:49 GMT

Hello,

You can go through below links to understand the difference between manual and auto NAT. Manual (twice) NAT is basically policy nat version of 8.2 code. Also, please read about the order of preference which would make things simpler for you.

Let me know if there are any questions:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/nat_objects.html

HTH