NAT Question

sonitadmin — Mon, 11 Mar 2019 11:33:20 GMT

Putting a new ASA 5505 in tomorrow. I have 3 machines that need to NAT to external IP's. If I enter the following commands will this work?

nat (inside) 0 access-list inside_nat0

nat (inside) 1 172.20.5.0 255.255.255.0

static (inside,outside) 10.17.16.10 172.20.5.200 netmask 255.255.255.255 0 0

Followed by the other two addresses. I'm not sure if this is what I need or not. Looking for some insight on the best way to set it up.

Thanks!

Re: NAT Question

jwalker — Tue, 20 Nov 2007 20:52:58 GMT

Sonitadmin -

For external access like you describe, you need to have a NAT/global pair or statics. Below is an example of each. I am not sure why you added the nat 0 to the post, but I just want you to realize it is most like for VPN traffic.

NAT/Global

nat (inside) 1 192.168.1.0 255.255.255.0

global (outside) 1 172.16.2.0 255.255.255.240 OR global (outside) 1 interface

Statics

static (inside,outside) 172.16.1.0 192.168.1.0 netmask 255.255.255.240

static (inside,outside) 172.16.1.1 192.168.1.1

static (inside,outside) 172.16.1.2 192.168.1.2

etc

Please let me know if you have any more questions.

Jay

Please rate if this helps..

topic NAT Question in Network Security

NAT Question

Re: NAT Question