NAT on ASA 5505

[hanwucisco]

hi, I only have one public address. Inside, I have one computer inside with ip add 192.168.1.100. When I was trying NAT command, it gave me the follow error. Does it mean that i can't use the ip on the outside interface?

ciscoasa(config)# object network homenet
ciscoasa(config-network-object)# host 192.168.1.100
ciscoasa(config-network-object)# nat (inside,outside) static X.X.43.172<======= this is the outside interface IP.
ERROR: Address X.X.43.172 overlaps with outside interface address.
ERROR: NAT Policy is not downloaded

thanks,

[varrao · Accepted solution]

Hi here's your answer:

ciscoasa(config)# object network homenet
ciscoasa(config-network-object)# host 192.168.1.100
ciscoasa(config-network-object)# nat (inside,outside) dynamic interface

you cannot statically NAT to outside interface. This would stop all otyher services as well.

Thanks,

Varun

[varrao]

Here is the document for it :

http://www.cisco.com/en/US/customer/docs/security/asa/asa83/configuration/guide/nat_objects.html#wp1106144

P.S.- rate posts if helpful

Thanks,

Varun