PBR VS NAT PRIORITY CISCO ASA 55XX 9.6

[RASU]

Hello Friends,

I have tried to accomplish below task, could someone assist to proceed further on this task

cisco ASA :

inside interface : 1.1.1.1

DMZ1 interface : 2.2.2.2

DMZ2 interface : 3.3.3.3

source : 4.4.4.4 (4.4.4.0/24 reachable through inside)

Destination : 5.5.5.5 (5.5.5.0/24 reachable through DMZ2)

i want to divert this specific traffic (4.4.4.4 to 5.5.5.5) through DMZ1 and want to NAT the source as well, If I try route-map matching this traffic and set next hop as 2.2.2.1(DMZ1) with static NAT for natting the source, will it works ?

any other config required? How NAT and route-map behave in this scenario?

[Ajay Saini]

Hello,

DMZ2 is 5.5.5.0/24, if you add a more specific route for lets say 5.5.5.5/32 through DMZ1, it will work just fine. No need for PBR or route-maps.

We just need below config:

1. specific route eg. route dmz1 5.5.5.5 255.255.255.255 x.x.x.x

2. add a manual NAT with destination self NAT for 5.5.5.5. and source as 4.4.4.4 to itself.

Try and see if it works.

HTH
AJ

[RASU]

Hi Ajay,

Thanks for your suggestion, I missed one thing , 5.5.5.5 should also be reachable through DMZ2.

source 4.4.4.4 will nat to one of the IP in the DMZ1 subnet like 2.2.2.5