Hi I have a Windows XP client with IP 192.168.1.10/24 and as default gateway a router 192.168.1.1
I have assigned a second IP address on the XP: 192.168.2.10/24.
And I have installed an ASA:
interface Ethernet0/0
nameif Outside
security-level 0
ip address xxx.xxx.xxx.1 255.255.255.0 !
interface Ethernet0/1
nameif Inside
security-level 50
ip address 192.168.2.1 255.255.255.0
I try to do a static port forwarding:
access-list Outside_to_Inside extended permit ip any any
nat-control
nat (Inside) 1 0.0.0.0 0.0.0.0
static (Inside,Outside) tcp xxx.xxx.xxx.10 www 192.168.2.10 www netmask
255.255.255.255
access-group Outside_to_Inside in interface Outside
Should the translation work without changing the default gateway of the XP to ASA (192.168.2.1)?
In my case the translation does not work so far:
sh nat
match tcp Inside host 192.168.2.10 eq 80 Outside any
static translation to xxx.xxx.xxx.xxx/80
translate_hits = 0, untranslate_hits = 2
Any help would be much appreciated.