Cisco ASA NAT

[Mohammed.Fawzi]

hi

i have an issue with nat i need to solve

i have two servers that they are natted to two public IPs

let say 192.168.1.1 to 1.1.1.1

192.168.1.2 to 1.1.1.2

i want them they can connect to each other by public IPs

when 192.168.1.1 pings to 1.1.1.2 there is no reply

how can i do this in my senario

[MHM Cisco World]

Nat(in'in) source static 192.168.1.1 1.1.1.1 destiantion static 192.168.1.2 to 1.1.1.2

This what you need 

[Mohammed.Fawzi]

But I want the destination 1.1.1.2 not 192.168.1.2

the problem is when the two public IPs from same range block NATed on the same firewall interface they can't communicate normally if you get my idea

thanks for your attention

[MHM Cisco World]

The source and destination will NAT with command I share above. 

[Sheraz.Salim · Accepted solution]

nat (inside,inside) source static 192.168.1.1 1.1.1.1 destination static 1.1.1.2 192.168.1.2 no-proxy-arp
nat (inside,inside) source static 192.168.1.2 1.1.1.2 destination static 1.1.1.1 192.168.1.1 no-proxy-arp
!
!
access-list inside_access_in extended permit icmp host 192.168.1.1 host 1.1.1.2
access-list inside_access_in extended permit icmp host 192.168.1.2 host 1.1.1.1
!
!
access-group inside_access_in in interface inside

or

object network Server1_Internal
 host 192.168.1.1
 nat (inside,outside) static 1.1.1.1
!
object network Server2_Internal
 host 192.168.1.2
 nat (inside,outside) static 1.1.1.2
!
access-list outside_access_in extended permit icmp host 1.1.1.1 host 1.1.1.2
access-list outside_access_in extended permit icmp host 1.1.1.2 host 1.1.1.1
!