topic ASA 5510 NAT in Network Security

ASA 5510 NAT

The_guroo_2 — Mon, 11 Mar 2019 20:54:49 GMT

I am pretty new to ASA and i need to do some NAT (for servers) Scenario is that we have a customer who is connected to data centres via MPLS private WAN cloud.....we have ASA 5510 using 8.2 IOS.

there is a dynamic NAT confiured for 0.0.0.0 0.0.0.0 (going out) with a pool which is /24

I have follwoing config in the ASA

Object network inside_LAN

Object betwrok customerpool1

range 192.168.1.0 192.168.1.255

object network inside_LAN

nat (inside,outside) dynamic customerpool1 (so will it do pat or i am confused)

now i have some servers example 210.22..1.X/32 i have allocated 10.22.0.0/24 network for that (NAT)

so what will be the config...i am really confuse as customer has to access these server so i shd hide the 210 to 10.22.0.1/32

Thanks guys plz reply as i am going nuts

ASA 5510 NAT

varrao — Tue, 05 Jul 2011 10:35:08 GMT

Hi Guroo,

1st Question:

Yes, the configuration that you have is for dynamic PAT, this is the correct configuration

2nd Question:

Let say you have a server with Private Ip -- 10.22.1.1 and Public IP - 212.22.1.1, and you want the users on the outside world to access the server with ip address - 212.22.1.1, then the nat commands would be:

object network public_ip

host 212.22.1.1

object network private_ip

host 10.22.1.1

nat (outside,inside) source static any any destination static public_ip private_ip

and you would also need an access-list;

access-list out_in extended permit ip any host 10.22.1.1

access-group out_in in interface outside

thats all you would need, if you have some more servers, add them the same way.

Hope this helps.

Thanks,

Varun

ASA 5510 NAT

The_guroo_2 — Sat, 09 Jul 2011 06:59:27 GMT

Thanks Varun

V well explianed my question i thyat my servers will be accessed by a cutomer (the cutomer is on private MPLS no internet) now we have Mail servers plus SAP servers so if my internal SAP server we have allocated a range of /16 to internal servers

1 if real IP is 192.168.1.1 -----> I want NAT to 10.1.1.1/32--------> cutomer IP

2 so if cutomer 50 clients servers will be accessing my internal one what would be the command

secondly what would be the command for static NAT (my internal) to external one as i want to NAT my internal IP to NAT an dthen to customer

I hope i tried to explain the point

Thanks again