NAT IOS 9.1(5)

[dukeminus]

Hello I need to setup an inbound nat rule using the following:

 - inbound nat will be 168.97.45.6

- translation ip will be 209.165.201.3

 - outside host 208.45.6.7

What would be the best way to create this rule?

[Vibhor Amrodia]

Hi,

You would have to create a Static NAT on the ASA device and as per the Outside host is connected it can be a single IP or anything on the internet which would be able to access this server from the outside

On the ASA 8.2 and before:-

static (inside,outside) 209.165.201.3 168.97.45.6

access-list inbound permit ip <any>(or host 208.45.6.7) host 209.165.201.3

On the ASA 8.3 + :-

object network obj-168.97.45.6

host 168.97.45.6

nat (inside,outside) static 209.165.201.3

access-list inbound permit ip <any>(or host 208.45.6.7) host 168.97.45.6

Thanks and Regards,

Vibhor Amrodia

[dukeminus]

Thanks Vibhor,

This is all that should be needed ... correct :)

I appreciate your help with this. I no that there was a lot of changes with NAT

Regards

James

[Vibhor Amrodia · Accepted solution]

Hi,

Yes , this is all that is needed. To verify if you have everything , you can run a packet tracer and see if allows the traffic:-

https://supportforums.cisco.com/document/29601/troubleshooting-access-problems-using-packet-tracer

Please select the reply as solution which you think answers your query.

Thanks and Regards,

Vibhor Amrodia