topic I've resolved it: in Network Security

Stuck on a NAT problem

handsy — Tue, 12 Mar 2019 08:16:04 GMT

I'm stuck!

I need to get to an IP address on the other side of my Cisco ASA5555-X running 9.5.

Here's the important info (IPs obfuscated for obvious reasons):

Source IP can be anything
Destination IP for clients is 10.92.200.1 (int-map)
NAT'ed to 66.77.88.1 (ext-map)
Source must also be translated to use Interface IP of destination interface

I just cannot get my head round this one, basically I'm trying to get a basic NAT done, followed by a Source IP overwrite.

My initial attempt:

nat (inside,outside) source dynamic any interface destination static ext-map ext-map

...but that clearly misses the step where I translate int-map to ext-map. Can I even do this in 1 line of config??

Hi handsy, you may try with:

Matias Ortiz — Tue, 13 Sep 2016 15:22:48 GMT

Hi handsy, you may try with:

object network OBJ-10.92.200.1
subnet 10.92.200.1 255.255.255.255

nat (inside,outside) source static any OBJ-66.77.88.1 destination static OBJ-10.92.200.1 OBJ-10.92.200.1

Kind regards.-

PS: Please don't forget to rate and mark as correct answer if this answered your question

Unfortunately, that does not

handsy — Tue, 13 Sep 2016 17:36:40 GMT

Unfortunately, that does not resolve the rewriting of the source IP as my outside interface address.

I've resolved it:

handsy — Tue, 13 Sep 2016 18:09:45 GMT

I've resolved it:

object network int-map
host 10.92.200.1

object network ext-map
host 66.77.88.1

nat (inside,outside) source dynamic any interface destination static int-map ext-map

Very happy 🙂