FTD Nat Question

[benolyndav]

Hi

Is it possible to Nat to another device  so if I have a public IP natting to a Private IP does that private IP have to reside on the FTD or can it somehow be forwarded on to private IP (server) routing is inplace between FTD and Server.???

Thanks

[Rob Ingram]

Hi @benolyndav no it doesn't have to reside on the FTD, it needs to be routable from the FTD.

[benolyndav]

Hi Rob

So 

1. Nat rule Public outside (interface) to private IP ( interface that has route to  internal IP not residing on FTD Interface)

2. acl allowing the above.

Thanks

[Rob Ingram]

@benolyndav correct. Ensure the Access Control rule (ACL) references the real private IP address not the translated.

[benolyndav]

Hi rob

Im a bit confused as to what interface to stipukate in nat rule as the private ip (server) dosent reside on the FTD itself, i have an acl saying outside to in any to private Ip??

[Rob Ingram · Accepted solution]

@benolyndav you would define the interface that the private server is reachachable via, so the inside or DMZ interface for example.

[benolyndav]

Brilliant Rob it works Thankyou