topic Static NAT Internet => LAN in Network Security

Static NAT Internet => LAN

CSCO10889920 — Mon, 11 Mar 2019 23:56:49 GMT

Hello Guys,

Please, I need to create a static NAT in order to allow a specific host(source) on internet (ex: 100.100.100.100) to connect a specific internal host (ex: 10.10.10.10) for a video-conference system. My question is : how could I create a NAT in order to allow that communication?

*I have a static NAT rule for outbound ( from inside to outside). Today my system can start the communication but cannot receive the request/connection from that host on internet.

My system is an ASA 5520

Thanks in adv,

Marc

Static NAT Internet => LAN

Julio Carvajal — Thu, 20 Sep 2012 18:33:18 GMT

Hello,

You DO need a static translation for that as right now you might be using a Dynamic NAT and that is not biderectional.

Here is what I need from you in order to make this work:

1-What ports are you going to access from the internet?

2-Do you have an available IP address ( Dedicated that you could use to point 10.10.10.10 on the internet)

3-What version are you running on the ASA.

Any other question...Sure.. Just remember to rate all of my answers.

Regards,

Julio

Static NAT Internet => LAN

CSCO10889920 — Fri, 21 Sep 2012 12:04:50 GMT

Hello Julio,

Thanks. Below you find my answers:

"1-What ports are you going to access from the internet?" Several TCP and UDP ports (voice setup and video streaming and more)

"2-Do you have an available IP address ( Dedicated that you could use to point 10.10.10.10 on the internet) " Yes

"3-What version are you running on the ASA." 8.2(5)

I would like something like:

Source Destination Translated Source TranslatedDestination Port/Service

100.100.100.100 90.90.90.1 "as original(100.100.100.100)" 10.10.10.10 any

Or:

Source Destination Translated Source TranslatedDestination Port/Service

any 90.90.90.1 "as original" 10.10.10.10 any

In the last case, for security reasons, the host will be up only when needed.

Thanks

Rdgs

Marc