how to implement NAT on multiple internal VLANs (DMZ)

G4stechno — Mon, 11 Mar 2019 20:17:07 GMT

Hi I've got a cisco asa 5520 and I need some help setting up the NAT for multiple DMZs on it.

I want to use PAT on the outside interface.

internally ive created subinterfaces for the VLANs and connected to a trunk port on a switch.

can you please advise me whats the best way to configure NAT for this scenario. I've got only 1 external public IP address.

Re: how to implement NAT on multiple internal VLANs (DMZ)

Somanna M.P — Tue, 05 Apr 2011 17:32:42 GMT

Hi Harinder,

The best way to do this would be to pat it to the public IP address you have . This can be done in a pretty simple manner. Assign the public Ip address to the outside interface on the ASA and then the config goes like :

nat (DMZ1) 1  
nat (DMZ2) 1  
nat (DMZ3) 1  
nat (DMZ4) 1  
nat (DMZ5) 1  

Global (outside) 1  interface 

This PATs all the IP addresses on the DMZ interfaces to the outside interface IP address.
Do let me know if you have further queries on this. 



PS: Please mark the question resolved if it has been answered. Do rate helpful posts.

topic how to implement NAT on multiple internal VLANs (DMZ) in Network Security

how to implement NAT on multiple internal VLANs (DMZ)

Re: how to implement NAT on multiple internal VLANs (DMZ)