Question on NAT 2 Private IP Addresses...

CSCO11733516 · ‎12-03-2012

Guys-

Question, If I have 2 Private IP Address and I want them to be NAT'd to the same IP address on the way out (specifically for 25 ports) - how can/is the correct way of doing this?

This is what I am thinking, but I feel like I am wrong:

Policy NAT

access-list POLICY_NAT extended permit tcp host 192.168.1.2 any eq 25

access-list POLICY_NAT extended permit tcp host 192.168.1.3 any eq 25

(NOTE: there are 2 existing Global IP's specified - hence ID 3)

nat (IN) 3 access-list POLICY_NAT

global (OUT) 3 2.2.2.2

I feel like I am missing a static command and a ACL, but at the same time - I don't know if I chose the correct NAT Solution.

Can someone please give me some recommendations? This is on 8.2 Code ASA.

julomban · ‎12-03-2012

Hello Kenneth,

If you are trying to do this in outbound direction you have the correct commands. Basically you create an access list matching source/destination and port, and then you just need to add the corresponding NAT and global rules with the corresponding ACL and ID.

Regards,

Juan Lombana

Please rate helpful posts.