Hi all! I'm fairly new to the "new" way of setting up NAT rules on the the ASA and need a little help getting going. I'm probably overlooking something very simple but I just can't see it for some reason!!!!! Overall I would like to send all of the traffic from one inside network (192.168.95.0) to one outside address (192.xx.xx.248) using dynamic PAT and the traffic from a second inside netwok (192.168.10.0) to another outside address (192.xx.xx.247) using a static NAT. I have the dynamic PAT working fine but cannot seem to get a static NAT working for the other. Below is the current config I am using. Any insite or suggestions would be greatly appreciated!!!!!!!!!!!
Thank You!
-Ken
ASA Version 8.4(2)
!
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Ethernet0/0
switchport access vlan 192
!
interface Ethernet0/1
switchport access vlan 95
!
interface Ethernet0/2
switchport access vlan 10
!
interface Ethernet0/3
shutdown
!
interface Ethernet0/4
shutdown
!
interface Ethernet0/5
shutdown
!
interface Ethernet0/6
shutdown
!
interface Ethernet0/7
shutdown
!
interface Vlan1
no nameif
no security-level
no ip address
!
interface Vlan10
nameif VoIP
security-level 100
ip address 192.168.10.1 255.255.255.0
!
interface Vlan95
nameif Inside-Interface
security-level 100
ip address 192.168.95.1 255.255.255.0
!
interface Vlan192
nameif Outside-Interface
security-level 0
ip address 192.136.22.248 255.255.255.0
!
ftp mode passive
object network voip
host 192.168.10.2
object network test
subnet 192.168.95.0 255.255.255.0
pager lines 24
mtu Outside-Interface 1500
mtu Inside-Interface 1500
mtu VoIP 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
!
object network voip
nat (VoIP,Outside-Interface) static 192.xx.xx.247 dns
object network test
nat (Inside-Interface,Outside-Interface) dynamic interface dns
route Outside-Interface 0.0.0.0 0.0.0.0 192.xx.xx.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
no service password-recovery
telnet timeout 5
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
!
class-map inspection_default
match default-inspection-traffic
