Destination NAT

[arumugasamy]

Team,

One of the customer wants to implement the below scnarios. I need to give them the configuration.

Inside network  source 192.168.100.1 App svr when accessing the outside destination mail svr 192.168.1.112 (This IP can not removed from the svr 192.168.100.1 code). the destination ip 192.168.1.112 should be translated to 192.168.1.134.Real mail server 192.168.1.112 will be removed from the network and its place to be installed 192.168.1.134.Since the server ip 192.168.1.112 is not removed from 192.168.100.1 App server code,we need to map the dest IP 192.168.1.112 to 192.168.1.134.

SOURCE-192.168.100.1 - DESTINATION- 192.168.1.112 -THEN AGAIN 192.168.1.134.

ASA 8.2.5 image on ASA 5520.

Pls help me with the script

Thx

[Akshay Rastogi · Accepted solution]

Hi,

Please use the statement like below:

"static (outside,inside) 192.168.1.112 192.168.1.134"

This above statement says that if anybody from inside would try to access 1.112 then it traffic would be redirected to 1.134 on Outside interface

Hope it helps.

Regards,

Akshay Rastogi

Remember to rate helpful posts.

[arumugasamy]

Dear Akshay,

Thanks for your great help. This is the correct one I expected. I verified in GNS3 and confirmed it.

In real setup there are 2 mail servers .112,.134 and 2 Apps servers 2.20,2.21.

So I created the access-list "

access-list NAT ext permit ip host 192.168.1.134 host 10.0.2.20

ccess-list NAT ext permit ip host 192.168.1.134 host 10.0.2.21

Static (outside,inside) 192.168.1.112 access-list NAT

APP1_R1# ping 192.168.1.112 

reply received after shutdown MAIL1_112_R3 interface fa0/0 (192.168.1.112)

Thanks a lot

[Akshay Rastogi]

Hi,

I am glad it worked.

Regards,

Akshay Rastogi

[arumugasamy]

Yes, Dear Akshay,

Thanks a lot for your timely help and support

Swami