cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
396
Views
0
Helpful
3
Replies

ASA5512 iOS 9.3 inside nat problem

Hi,

 

I face some nat problem. i have ASA5512 iOS 9.3 its connect outside (ip: 37.10.1.2/29) for internet and inside (ip 10.78.61.1/24) for LAN and server.

I configure dynamic nat for internet its work. In LAN switch has 4 VLAN one server VLAN ip add 10.88.61.0/24.

Now i map a public ip 37.10.1.3 for server 10.88.61.10 from outside internet its work. But when i try to ping server public ip 37.10.1.3 from LAN its not ping but server local ip 10.88.61.10 ping from LAN.

 

How can solve the issue i need to ping public ip from LAN. ALL LAN VLAN are nat on ASA outside interface (ip: 37.10.1.2/29).

!

interface GigabitEthernet0/0
 description #### Connect TO Internet ####
 nameif outside
 security-level 0
 ip address 37.10.1.2 255.255.255.248 
!
interface GigabitEthernet0/1
 description #### Connect TO Core Switch ####
 nameif inside
 security-level 100
 ip address 10.78.61.1 255.255.255.0

!

access-list outside-in extended permit ip any any

access-group outside-in in interface outside
access-group outside-in in interface inside

object network obj_any
 subnet 0.0.0.0 0.0.0.0
object network obj_Ser
 host 10.88.61.10
object network obj_Ser_WAN
 host 37.10.1.3

nat (inside,outside) source static obj_Ser obj_Ser_WAN

object network obj_any
 nat (inside,outside) dynamic 37.10.1.4 

same-security-traffic permit intra-interface

 

Thanks

Afzal
 

1 Accepted Solution

Accepted Solutions

Vibhor Amrodia
Cisco Employee
Cisco Employee

Hi,

Try this NAT:-

nat (inside,inside) source static obj_Ser obj_Ser_WAN

Thanks and Regards,

Vibhor Amrodia

View solution in original post

3 Replies 3

Vibhor Amrodia
Cisco Employee
Cisco Employee

Hi,

Try this NAT:-

nat (inside,inside) source static obj_Ser obj_Ser_WAN

Thanks and Regards,

Vibhor Amrodia

Hi,

Its works now.

Thanks

Afzal

 

Thanks ALL.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card