topic Re: Static NAT problem in Network Security

Static NAT problem

John Blakley — Mon, 11 Mar 2019 15:11:20 GMT

All,

I have a problem in that I have multiple IP addresses that get redirected to the same internal host.....on the same port.

I can't do:

static (dmz1,outside) x.x.x.x x.x.x.x netmask x.x.x.x

And I can't do:

static (dmz1,outside) tcp x.x.x.x port x.x.x.x port netmask 255.255.255.255

Can I do anything for this?

Thanks,

John

Re: Static NAT problem

Jon Marshall — Fri, 27 Mar 2009 22:21:15 GMT

John

I don't think you can do this with the ASA. If the source addresses were different depending on the public IP address being accessed then you could do something but if this isn't the case i don't think the ASA will let you configure this.

Jon

Re: Static NAT problem

vikram_anumukonda — Sat, 28 Mar 2009 02:11:44 GMT

check this post

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.2cd2616a/6#selected_message

Re: Static NAT problem

Jon Marshall — Sat, 28 Mar 2009 06:20:59 GMT

Vikram

Many thanks for this. I was involved in that post too so i should have remembered 🙂

John

Apologies, totally forgot about that post, your memory goes as you get older :-).

Jon

Re: Static NAT problem

vikram_anumukonda — Sat, 28 Mar 2009 06:41:46 GMT

no worries JON, we all make mistakes :).

Re: Static NAT problem

John Blakley — Sat, 28 Mar 2009 11:35:18 GMT

Jon,

I submitted a tac case yesterday, and they said that it was impossible.

I just tested this on my ASA at the house, and it works great. 😃

Thanks Jon and Vikram!

John