topic Re: ASA 5540 - NAT in Network Security

ASA 5540 - NAT

battanc — Mon, 11 Mar 2019 12:44:35 GMT

I have two inside Network and two outside, each on separate Interface.

I need double NAT: each inside Network to each outside Interface.

The configuration is as follow, but don't work:

(...)

global (OUTSIDE) 101 interface

global (ISP) 1 interface

nat (INSIDE) 0 access-list INSIDE_nat0_outbound

nat (INSIDE) 1 172.23.48.0 255.255.252.0

nat (INSIDE) 101 0.0.0.0 0.0.0.0

nat (RETE-GDP) 0 access-list INSIDE_nat0_outbound

nat (RETE-GDP) 1 GDP-LAN 255.255.192.0

(...)

access-list INSIDE_nat0_outbound extended permit ip any (...)

access-list INSIDE_nat0_outbound extended permit ip any GDP-LAN 255.255.192.0

(...)

Some idea?

Re: ASA 5540 - NAT

owillins — Mon, 19 May 2008 18:28:32 GMT

Use this Cisco ASA 5500 Series Adaptive Security Appliances Configuration guide for NAT configuration on ASA 5540.

http://www.cisco.com/en/US/products/ps6120/tsd_products_support_configure.html

Re: ASA 5540 - NAT

vabruno — Tue, 20 May 2008 00:14:25 GMT

Looking at your nat config and if im reading your interfaces correctly it appears that you have a global 101 for interface (outside) and a global 1 for interface (ISP) if you initiate traffic from the inside interface from the 172.23.48.0 255.255.252.0 network it should be NAT'd to the outside IP of the (ISP) interface, is this working?