cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1891
Views
0
Helpful
2
Replies

ASA 5540 - NAT

battanc
Level 3
Level 3

I have two inside Network and two outside, each on separate Interface.

I need double NAT: each inside Network to each outside Interface.

The configuration is as follow, but don't work:

(...)

global (OUTSIDE) 101 interface

global (ISP) 1 interface

nat (INSIDE) 0 access-list INSIDE_nat0_outbound

nat (INSIDE) 1 172.23.48.0 255.255.252.0

nat (INSIDE) 101 0.0.0.0 0.0.0.0

nat (RETE-GDP) 0 access-list INSIDE_nat0_outbound

nat (RETE-GDP) 1 GDP-LAN 255.255.192.0

(...)

access-list INSIDE_nat0_outbound extended permit ip any (...)

access-list INSIDE_nat0_outbound extended permit ip any GDP-LAN 255.255.192.0

(...)

Some idea?

2 Replies 2

owillins
Level 11
Level 11

Use this Cisco ASA 5500 Series Adaptive Security Appliances Configuration guide for NAT configuration on ASA 5540.

http://www.cisco.com/en/US/products/ps6120/tsd_products_support_configure.html

vabruno
Level 3
Level 3

Looking at your nat config and if im reading your interfaces correctly it appears that you have a global 101 for interface (outside) and a global 1 for interface (ISP) if you initiate traffic from the inside interface from the 172.23.48.0 255.255.252.0 network it should be NAT'd to the outside IP of the (ISP) interface, is this working?

Review Cisco Networking for a $25 gift card