ASA static NAT source IP

[Karam Hanna]

hello Experts,

i have ASA transparent mode with code version 8.2.x  , i am trying to static NAT source IP for packet going from inside to outside interface "real source 1.1.1.1 and NAT source is 2.2.2.2", is the following statement correct?

static (outside,inside) 1.1.1.1 2.2.2.2 netmask 255.255.255.255

also do i need to add route on the firewall for 2.2.2.2 that points to inside?

thanks in advance for your help

[Julio Carvajal]

Hello KaraM

Do it like this:

static (Inside,ouside) 2.2.2.2 1.1.1.1

In this case you will nat the inside source to that outside Ip address

No need for a route

Regards,

[Karam Hanna]

thanks Jcarvaja, i will apply it and test

[Julio Carvajal]

Hello,

Sure, my pleasure

[suryashiva · Accepted solution]

Hi,

can it be done like this as well

static (Inside,ouside) 1.1.1.1 1.1.1.1

If i wish to use real ip inside address for the outside as well?

[halim.iguer]

Hello,

No need to add 2.2.2.2,

static (Inside,ouside) 1.1.1.1 1.1.1.1 ; this is a static identity nat,  you can use this configuration

Regards,

[Julio Carvajal · Accepted solution]

Hello Surya,

Exactly you can do it like that as well,

With that setup you will keep the same IP you are using on the inside,

Regards

Remember to rate all of the helpful posts, that is as important as a thanks