cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
985
Views
0
Helpful
3
Replies

ASA5512 iOS 9.3 inside nat problem

Hi,

 

I face some nat problem. i have ASA5512 iOS 9.3 its connect outside (ip: 37.10.1.2/29) for internet and inside (ip 10.78.61.1/24) for LAN and server.

I configure dynamic nat for internet its work. In LAN switch has 4 VLAN one server VLAN ip add 10.88.61.0/24.

Now i map a public ip 37.10.1.3 for server 10.88.61.10 from outside internet its work. But when i try to ping server public ip 37.10.1.3 from LAN its not ping but server local ip 10.88.61.10 ping from LAN.

 

How can solve the issue i need to ping public ip from LAN. ALL LAN VLAN are nat on ASA outside interface (ip: 37.10.1.2/29).

!

interface GigabitEthernet0/0
 description #### Connect TO Internet ####
 nameif outside
 security-level 0
 ip address 37.10.1.2 255.255.255.248 
!
interface GigabitEthernet0/1
 description #### Connect TO Core Switch ####
 nameif inside
 security-level 100
 ip address 10.78.61.1 255.255.255.0

!

access-list outside-in extended permit ip any any

access-group outside-in in interface outside
access-group outside-in in interface inside

object network obj_any
 subnet 0.0.0.0 0.0.0.0
object network obj_Ser
 host 10.88.61.10
object network obj_Ser_WAN
 host 37.10.1.3

nat (inside,outside) source static obj_Ser obj_Ser_WAN

object network obj_any
 nat (inside,outside) dynamic 37.10.1.4 

same-security-traffic permit intra-interface

 

Thanks

Afzal
 

1 Accepted Solution

Accepted Solutions

Vibhor Amrodia
Cisco Employee
Cisco Employee

Hi,

Try this NAT:-

nat (inside,inside) source static obj_Ser obj_Ser_WAN

Thanks and Regards,

Vibhor Amrodia

View solution in original post

3 Replies 3

Vibhor Amrodia
Cisco Employee
Cisco Employee

Hi,

Try this NAT:-

nat (inside,inside) source static obj_Ser obj_Ser_WAN

Thanks and Regards,

Vibhor Amrodia

Hi,

Its works now.

Thanks

Afzal

 

Thanks ALL.

Review Cisco Networking for a $25 gift card