Bi-directional STATIC NAT?

nick.szilagyi — Tue, 12 Mar 2019 07:59:01 GMT

Hi all,

quick question - if i configured an object called AVobject (IP of host 192.168.4.2) to NAT to an outside IP address (i.e 50.50.50.50), do I need to create an additional outside rule to translate it back?

(50.50.50.50, translated to 192.168.4.2). The scenario here is I have an AV object that needs to be translated to a WAN IP, any inbound traffic to the ASA to that WAN IP needs to be forwarded to that LAN IP.

My upstream rule appears to work on packet tracer, however returning the traffic I am having an issue with it.

I have a permit any, AVobject, AVServiceGroup, permit. Is the issue that I am setting the destination as the AV object which is using an RFC address?

think ive just answered my

nick.szilagyi — Sun, 03 Jul 2016 12:42:12 GMT

think ive just answered my own question - I've just tested and appears to work by amending the ACL destination to the WAN IP instead of the internal object IP.

topic Bi-directional STATIC NAT? in Network Security

Bi-directional STATIC NAT?

think ive just answered my