Static NAT verification

J_Vansen_S — Tue, 12 Mar 2019 06:33:18 GMT

Hi all,

I have a static nat question that came up in and environment, but i am not 100% sure if this will work.

Need some verification, due to the nature of the subnet-ed networks done by the ISP,

I have an ASA connected direct to the ISP with the network 111.11.11.64/30.

However i need to Static NAT all our Microsoft Lync services to subnet IPs beyond the /30 network which is in the range of 111.11.11.56/29.

Will the above work?

Usually i would do a /25 on the public network, but this time, the IPs subneted is being fixed by the ISP, as i do not want the hassle of calling them up to just change the subnet/re-routing on their side

Appreciate any advise

That will work. You need:The

Karsten Iwen — Sat, 05 Sep 2015 14:31:53 GMT

That will work. You need:

The network 111.11.11.56/29 has to be routed to your ASA by the ISP
You need the command "arp permit-nonconnected" on the ASA
and the "normal" static NAT and access-control on your ASA

topic That will work. You need:The in Network Security

Static NAT verification

That will work. You need:The