how to implement NAT on multiple internal VLANs (DMZ)

G4stechno · ‎04-05-2011

Hi I've got a cisco asa 5520 and I need some help setting up the NAT for multiple DMZs on it.

I want to use PAT on the outside interface.

internally ive created subinterfaces for the VLANs and connected to a trunk port on a switch.

can you please advise me whats the best way to configure NAT for this scenario. I've got only 1 external public IP address.

Somanna M.P · ‎04-05-2011

Hi Harinder,

The best way to do this would be to pat it to the public IP address you have . This can be done in a pretty simple manner. Assign the public Ip address to the outside interface on the ASA and then the config goes like :

nat (DMZ1) 1  
nat (DMZ2) 1  
nat (DMZ3) 1  
nat (DMZ4) 1  
nat (DMZ5) 1  

Global (outside) 1  interface 

This PATs all the IP addresses on the DMZ interfaces to the outside interface IP address.
Do let me know if you have further queries on this. 



PS: Please mark the question resolved if it has been answered. Do rate helpful posts.