06-19-2015 11:53 AM - edited 03-11-2019 11:09 PM
Hello I need to setup an inbound nat rule using the following:
- inbound nat will be 168.97.45.6
- translation ip will be 209.165.201.3
- outside host 208.45.6.7
What would be the best way to create this rule?
Solved! Go to Solution.
06-23-2015 04:46 AM
Hi,
Yes , this is all that is needed. To verify if you have everything , you can run a packet tracer and see if allows the traffic:-
https://supportforums.cisco.com/document/29601/troubleshooting-access-problems-using-packet-tracer
Please select the reply as solution which you think answers your query.
Thanks and Regards,
Vibhor Amrodia
06-19-2015 07:31 PM
Hi,
You would have to create a Static NAT on the ASA device and as per the Outside host is connected it can be a single IP or anything on the internet which would be able to access this server from the outside
On the ASA 8.2 and before:-
static (inside,outside) 209.165.201.3 168.97.45.6
access-list inbound permit ip <any>(or host 208.45.6.7) host 209.165.201.3
On the ASA 8.3 + :-
object network obj-168.97.45.6
host 168.97.45.6
nat (inside,outside) static 209.165.201.3
access-list inbound permit ip <any>(or host 208.45.6.7) host 168.97.45.6
Thanks and Regards,
Vibhor Amrodia
06-22-2015 06:44 AM
Thanks Vibhor,
This is all that should be needed ... correct :)
I appreciate your help with this. I no that there was a lot of changes with NAT
Regards
James
06-23-2015 04:46 AM
Hi,
Yes , this is all that is needed. To verify if you have everything , you can run a packet tracer and see if allows the traffic:-
https://supportforums.cisco.com/document/29601/troubleshooting-access-problems-using-packet-tracer
Please select the reply as solution which you think answers your query.
Thanks and Regards,
Vibhor Amrodia
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide