NAT Configuration on Cisco ASA 5516-X with FTD

[VCsupport17]

Hello Support Community,

We have Cisco ASA 5516-X running with FTD. Our ISP provided us a backbone router and range of Public IP address to be able to use in the future for our servers that will be deployed on the DMZ. Our servers on DMZ will be NATed using 1:1 Static NAT.

We have two ASA 5516-X in the network for internal and external. A DMZ switch sits in between the two firewalls. How can I configure or set the range of Public IP address provided by ISP on the external firewall and is there a guide on how to do the 1:1 NAT.

For example ISP provided the public IP range 123.1.2.X - 123.1.2.Z

Pivate IP (DMZ) <-----> Public IP

10.2.1.100 <-----> 123.1.2.3

10.2.1.101 <-----> 123.1.2.4

10.2.1.102 <-----> 123.1.2.5

[singhkulbir29881]

Hi,

Following is the link having configuration example. Go to Examples for Network Object NAT in a link.

http://www.cisco.com/c/en/us/td/docs/security/asa/asa94/config-guides/cli/firewall/asa-94-firewall-config/nat-reference.html#ID-2091-00000007

Please rate if this is helpful.