Destination NAT with a specific origin ASA 8.2

[Rafael Mendes]

Hello Everyone,

I need configure destination NAT in my ASA 8.2 version only for a specific origin.

Today, the network 10.84.25.0/24 access the web server with IP 172.17.3.150, i need nat the IP 172.17.3.150 to 10.96.202.10 only for

10.84.25.0/24 network.

How i can configure this in  8.2 version?

Tks!

[Jouni Forss · Accepted solution]

Hi,

I am not quite sure how the setup is on your ASA currently but the following configuration option came to mind

• Interfaces "dmz" and "inside"
• 10.84.25.0/24 = "inside" network
• 172.17.3.150 = "dmz" server real IP
• 10.96.202.10 = "dmz" server mapped IP

access-list DMZ-SERVER-POLICYNAT remark Policy NAT for DMZ Server

access-list DMZ-SERVER-POLICYNAT permit ip host 172.17.3.150 10.84.25.0 255.255.255.0

static (dmz,inside) 10.96.202.10 access-list DMZ-SERVER-POLICYNAT

Hope this helps

- Jouni

[Rafael Mendes]

Hi Jouni,

Tks!