Nat rules in ASA 8.4

[benson.low]

Hi CSC,

I am attempting to do nat in the following order:

1. DestA (Translated DestA1) <-> Real IP (Egress A)

2. DestA (Translated DestA2) <-> Real IP (Egress B)

3. DestA (Translated to Egress A) (using PAT) -> Real IP (Egress A)

Would option 1 and 3 clash?

Is it possible to implement the above?

Is the order critical or asa do the most specific match?

Rgrds,

Benson

[llamaw0rksE]

Greek to me. Your syntax means nothing but then again I am not cisco literate.

Do you want external users access to an internal server?

Do you want internal users access to external servers (and thus assume normal LAN to WAN traffic is blocked by acl rules)?

Do you want internal users on one ASA lan, to access servers on another lan on the same ASA?