Having Trouble with NAT configurations

[MathewBehr]

                   We recently had our firewall expert leave and i have been tasked with trying to fill his spot

we are in the middle of DR testing and im having issues getting to a resource that connected on the outside interface of my ASA,

The following in a edited exert frommy config,

Am i doing it right i guess is my question

interface Ethernet0/5
switchport access vlan 999

interface Ethernet0/7
switchport access vlan 998

interface Vlan998
description Disaster Recovery NAT Network
nameif insidedr
security-level 100
ip address 10.1.1.1 255.255.255.0

interface Vlan999
description Recovered DR Network 10.2.2.1
nameif outsidedr
security-level 0
ip address 10.2.2.1 255.255.255.0

object network Address_i_need_to_get_to
host 10.2.2.2

object network Address_i_target
host 10.1.1.2

nat (insidedr,outsidedr) source static Address_i_target Address_i_need_to_get_to

[Jouni Forss]

Hi,

If I understood you requirements correctly THEN I think you should have the interfaces the other way around.

nat (outsidedr,insidedr) source static Address_i_target Address_i_need_to_get_to

This would basically tell the ASA to NAT the IP address 10.2.2.2 on "outsidedr" to the IP address 10.1.1.2 on the "insidedr"

- Jouni