topic Hi Ankita, in Network Security

Mapping of private server IP to public IP given in pool

diwakar410 — Tue, 12 Mar 2019 07:55:24 GMT

I already have the public ip of A.B.C.D. The internet is working fine from that one.

Now, the client has given me other Public ip pool of x.x.x.x/29 and have asked me to map the IP in the pool to the respective servers in the private IP.

For eg: 10.10.1.2 has the MIs server and they want me to map this private IP to the ip in the pool to let us say 202.203.204.205 and similarly,

10.10.1.3 which is web server should be mapped to the IP in the pool eg: 202.203.204.206 and so on.

Now, How do i do it?

I have 6 interfaces on ASA. 0/0 has the public ip and 0/5 has the pool ip. Is it wise to put the pool ip in one of the interface? Else, what can be done?

Hope you understood me.

Please help me.

Hi,

ankojha — Tue, 21 Jun 2016 08:21:18 GMT

Hi,

You can achieve your requirement but creating an auto nat to do static nat.

Create object network for the public ip pool lets say test and configuration will be something like :

object network

host 10.10.1.3

nat (inside,outside) static test service tcp 80 8080

Rate if it helps.

Thanks,

Ankita

Hi Ankita,

diwakar410 — Tue, 21 Jun 2016 08:28:13 GMT

Hi Ankita,

Do you mean that i don't have to keep the public IP pool that was given later by the ISP in any of my interface? I have kept this pool ip in my 0/5 interface in 5515-x ASA.

Hi Diwakar,

ankojha — Wed, 22 Jun 2016 09:13:11 GMT

Hi Diwakar,

You can keep the pool on the interface as well and the config suggested by me should work

well in that case also.

Just check whether you get any translate hits on the nat created.

Thanks,

Ankita