topic ASA static NAT source IP in Network Security

ASA static NAT source IP

Karam Hanna — Tue, 12 Mar 2019 01:20:41 GMT

hello Experts,

i have ASA transparent mode with code version 8.2.x , i am trying to static NAT source IP for packet going from inside to outside interface "real source 1.1.1.1 and NAT source is 2.2.2.2", is the following statement correct?

static (outside,inside) 1.1.1.1 2.2.2.2 netmask 255.255.255.255

also do i need to add route on the firewall for 2.2.2.2 that points to inside?

thanks in advance for your help

ASA static NAT source IP

Julio Carvajal — Wed, 27 Mar 2013 18:52:06 GMT

Hello KaraM

Do it like this:

static (Inside,ouside) 2.2.2.2 1.1.1.1

In this case you will nat the inside source to that outside Ip address

No need for a route

Regards,

ASA static NAT source IP

Karam Hanna — Wed, 27 Mar 2013 19:51:24 GMT

thanks Jcarvaja, i will apply it and test

ASA static NAT source IP

Julio Carvajal — Wed, 27 Mar 2013 21:11:22 GMT

Hello,

Sure, my pleasure

ASA static NAT source IP

suryashiva — Thu, 28 Mar 2013 07:03:07 GMT

Hi,

can it be done like this as well

static (Inside,ouside) 1.1.1.1 1.1.1.1

If i wish to use real ip inside address for the outside as well?

ASA static NAT source IP

halim.iguer — Thu, 28 Mar 2013 10:28:19 GMT

Hello,

No need to add 2.2.2.2,

static (Inside,ouside) 1.1.1.1 1.1.1.1 ; this is a static identity nat, you can use this configuration

Regards,

ASA static NAT source IP

Julio Carvajal — Thu, 28 Mar 2013 16:16:20 GMT

Hello Surya,

Exactly you can do it like that as well,

With that setup you will keep the same IP you are using on the inside,

Regards

Remember to rate all of the helpful posts, that is as important as a thanks