Double NAT in 1 Firewall

[christopheralinsubao]

I am managing an ASA 5585-SSP-10 Firewall and I have a requirements to configure NAT. Below is the scenario:

10.48.1.1 to 192.1.1.1 (inside to DMZ)

172.1.1.1 to 192.1.1.1 (outside to DMZ)

Is it possible to do? Appreciate if you will give me your expert advise.

Many Thanks,

Chris

[Cristian Nilsson · Accepted solution]

Hello,

As you have not specified if there is whole subnets or just hosts, i will go with hosts.

object network INSIDE-HOST
host 10.48.1.1

object network DMZ-HOST
host 192.1.1.1

object network OUTSIDE-HOST
host 172.1.1.1

nat (INSIDE,DMZ) source static INSIDE-HOST DMZ-HOST
nat (OUTSIDE,DMZ) source static OUTSIDE-HOST DMZ-HOST

//Cristian

[christopheralinsubao]

Thanks Christian,

Yes and I am using host for this deployment. I will do this next week.

Regards,

Chris