Hi All,
Presently, we are in a phase to migrate the whole Security devices from Juniper to ASA. the ASA version running on the device is: 9.4.
Below is the nat configuration of the Juniper box.
static {
rule-set All-ATMs-to-Radia {
from zone VPN-VSAT-Branches;
rule All-ATMs-to-Radia {
match {
destination-address 10.34.185.70/32;
}
then {
static-nat {
prefix {
10.34.196.47/32;
}
}
}
}
}
rule-set static-801-to-196 {
from interface reth0.801;
rule static-801-to-196 {
match {
destination-address 10.34.185.70/32;
}
then {
static-nat {
prefix {
10.34.196.47/32;
}
}
}
}
}
rule-set static-412-to-196 {
from interface reth0.412;
rule static-412-to-196 {
match {
destination-address 10.34.185.70/32;
}
then {
static-nat {
prefix {
10.34.196.47/32;
}
}
}
}
}
rule-set static-511-to-196 {
from interface reth0.511;
rule static-511-to-196 {
match {
destination-address 10.34.185.70/32;
}
then {
static-nat {
prefix {
10.34.196.47/32;
}
}
}
}
}
}
Now, Zone mapping between Juniper and ASA is :
Zone: VPN-VSAT-Branches (Juniper) -- > Interface: VPN-Branches (CISCO)
Interface reth0.412 (Juniper) -- > interface TPX-VPN (CISCO)
Interface reth0.511 (Juniper) --> Interface OUTSIDE (CISCO)
Real Destination IP: 10.34.185.70/32 ( Belongs to VLAN 513)
Mapped Destination IP: 10.34.196.47/32 (Belongs to VLAN 512)
Need help to get the configuration systax for ASA 9.4 so that we can achieved the same in ASA.
Warm Regards,
Soumik
