topic ASA 5500 NAT problems with SCTP in Network Security

ASA 5500 NAT problems with SCTP

alfaia.eduardo — Mon, 11 Mar 2019 21:43:19 GMT

Hi all, could anyone help me in this topic?

ASA 5500 NAT problems with SCTP

Eugene Khabarov — Thu, 27 Oct 2011 19:18:21 GMT

Hi! Can you describe your problem more verbose?

Maybe forum search will help to answer your question?

https://supportforums.cisco.com/thread/2043754

ASA 5500 NAT problems with SCTP

alfaia.eduardo — Thu, 27 Oct 2011 19:29:27 GMT

Hi Eugene

We are using Cisco ASA 5500 to do NAT of the an element in our Internal Network, which use SCTP, to another element in an external network(below). I've configured a Static NAT but this not work. My question is, does SCTP work with NAT in Cisco ASA 5500?

Internal Network      |       External Network
                         |
 +---------+             |               /--\/--\            +---------+
 |  SCTP   |          +-----+           /        \           |  SCTP   |
 |end point|==========| NAT |========= | Internet | =========|end point|
 |    A    |          +-----+           \        /           |    B    |
 +---------+             |               \--/\--/            +---------+
                         |

Thanks

ASA 5500 NAT problems with SCTP

Maykol Rojas — Fri, 28 Oct 2011 04:45:20 GMT

Well, based on the Fact that that you are doing static NAT the only thing that you will need is access list, since it is an IP procotol and the firewall does not pass it by default. You will need to create it both inside and outside.

The firewall is not going to be able to do deep packet inspection nor apply any kind of firewalling to that traffic.

Here is a thread you can follow:

https://supportforums.cisco.com/thread/2043754

Let me know.