ASA NAT Configuration

[benghock]

Hi,

I have ASA 5510 running version 7.0(4) with three network segment configured, network A, network B and network C. Can I configure the ASA to NAT IP host for network B to network C IP host ? The purpose of this configuration is to allow user from network A to access network B IP host, without knowing the the actual server is actually locate in network C. If yes, pls. advise on how can we achieve this configuration.

[jwalker]

Yes, this is possible. I am assuming A is the least secure network and C is the most secure...

This is done using statics and ACLs...

Here is an example:

static (networkC,networkB) 172.16.1.10 192.168.1.10

* translates networkC 192.168.1.10 to networkB 172.16.1.10

static (networkB,networkA) 10.10.10.10 172.16.1.10

* translates networkB 172.16.1.10 to networkA 10.10.10.10

access-list networkB_acl extended permit ip any host 172.16.1.10

* permits traffic from B to C host

access-list networkA_acl extended permit ip any host 10.10.10.10

* permits traffic from A to B host

access-group networkB_acl in interface networkB

access-group networkA_acl in interface networkA

** Please rate if this helps **