ASA Pub IP NAT

[yahyazyar]

Hello netpros,

I want to NAT a Private IP on DMZ to a specific Public IP, we have the subnet for ex. 7.7.7.0/29 , 7.7.7.1 is the GW and .2 is assigned to the Outside interface.

I did some research and find out that i need only one Static NAT to Let the Private IP go outside with a specific Pub IP.

Lets say that we want the host 172.16.1.9 to be reachable from outside with the IP 7.7.7.3

Example :

object network ServerX
host 172.16.1.9
nat (DMZ,OUTSIDE) 7.7.7.3

So only this command will work ? i mean its just a object, can that take effect to the configuration ?

[MHM Cisco World]

I prefer below way

Object network public

Subnrt host x.x.x.x

!

Object network private 

Subnet host y.y.y.y

!

Nat (in,out) static object private objects public 

You need also ACL to allow access to private IP with specific port

MHM