NAT Translation Question

[hurricane05]

Hi. Have a question regarding NAT. We have users that sit inside the office behind an ASA firewall. Users use a piece of software configured to resolve against a dns record which points to an external IP address (note we already tried to change the internal dns record but caused issues) . Can we create a NAT statement that matches the users internal subnet and when it's destined for the external ip address, to redirect to a specific ip address instead?

Thx in advance.

[Rob Ingram]

Hi @hurricane05 

You could try something like this:-

nat (INSIDE,OUTSIDE) source static INSIDE-NET INSIDE-NET destination static ORIGINAL-DST TRANSLATED-DST no-proxy-arp 

Change the ORIGINAL-DST object to represent the original IP address and TRANSLATED-DST to the ip address you want translated.

[hurricane05 · Accepted solution]

Sorry for late response. I'll give that a shot and let you know. Thx.