topic Hello, in Network Security

Double NAT in 1 Firewall

christopheralinsubao — Tue, 12 Mar 2019 08:04:13 GMT

I am managing an ASA 5585-SSP-10 Firewall and I have a requirements to configure NAT. Below is the scenario:

10.48.1.1 to 192.1.1.1 (inside to DMZ)

172.1.1.1 to 192.1.1.1 (outside to DMZ)

Is it possible to do? Appreciate if you will give me your expert advise.

Many Thanks,

Chris

Cristian Nilsson — Thu, 28 Jul 2016 11:14:51 GMT

Hello,

As you have not specified if there is whole subnets or just hosts, i will go with hosts.

object network INSIDE-HOST
host 10.48.1.1

object network DMZ-HOST
host 192.1.1.1

object network OUTSIDE-HOST
host 172.1.1.1

nat (INSIDE,DMZ) source static INSIDE-HOST DMZ-HOST
nat (OUTSIDE,DMZ) source static OUTSIDE-HOST DMZ-HOST

//Cristian

christopheralinsubao — Fri, 29 Jul 2016 04:26:54 GMT

Thanks Christian,

Yes and I am using host for this deployment. I will do this next week.

Regards,

Chris