How do I force an internal host or network to use a specific ip address on outbound http requests

[twhitney]

Hi Everyone,

I have a natted  Internal Webserver, which is working thanks to the guidelines found here

https://community.cisco.com/t5/firepower/acl-to-publish-my-internal-website-help-please/m-p/4016305#M16461

Now how do I force that same server to send its own http requests to any external website as the external ip address that it is set up to nat?

Right now all requests are appearing as the default IP of the FMC device.

I need it to appear as the specific ip.

Any guidance is appreciated.

[Francesco Molino]

Hi

Here a screenshot on how you can do it

You need to make sure it is placed before the global nat rule 1 in your screenshot from the other post (the one natting everything for internet access).

This will nat traffic source from http port to any port on the outside.

[Rob Ingram]

Hi,

Try something like this:-

Ensure this new rule is above your default rule that would normally nat the outbound traffic. If a connection is already established you will need to clear the existing xlate/nat connections with the command from the cli "clear xlate". Be careful doing that in production.

HTH

[twhitney]

Thank you both,

Both solutions work.

I really do appreciate the help.

[Francesco Molino]

You're welcome