topic to nat destination ip in Network Security

to nat destination ip

prashantrecon — Mon, 11 Mar 2019 22:55:16 GMT

nat (inside) 2 0.0.0.0 0.0.0.0

global (outside) 2 202.1.1.2

access-list acl extended permit ip any host 202.1.1.2

access-list policy exetended permit ip 10.10.10.1 192.168.1.1

global (inside) 5 172.16.1.1 netmask 255.255.255.255

nat (outside) 5 access-list policy

requirement is whenever the lan ip goes out it should be natted to 202.1.1.2

and whenever the source 10.10.10.1 goes to 192.168.1.1 the destination ip should be changed to 172.16.1.1

does it work ?

prashantrecon — Thu, 19 Apr 2012 09:23:44 GMT

Hi all

Is this possible ?

varrao — Thu, 19 Apr 2012 09:57:51 GMT

Yes, you have the configuration correct. It should work. But you need to add the outside keyword in the nat statement.

access-list policy exetended permit ip host 10.10.10.1 host 192.168.1.1

global (inside) 5 172.16.1.1 netmask 255.255.255.255

nat (outside) 5 access-list policy outside

Thanks,

Varun