02-10-2012 08:46 PM - edited 03-11-2019 03:28 PM
Just when I think I've got my head around nat, global and static commands i find myself struggling to get this 'simple' config working...
I have a pretty default config:
interface Vlan1
nameif inside
security-level 100
ip address 10.20.30.50 255.255.255.0
!
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) 10.20.30.0 10.20.30.0 netmask 255.255.255.0
I can ping from inside host to outside host and vice versa.
All i want to change is to NAT all traffic coming from the outside network on the inside interface so if i start to ping a host on the inside network from the outside, the traffic appears to come from 10.20.30.50 (my inside interface IP).
I'd appreciate any help.
Solved! Go to Solution.
02-10-2012 09:31 PM
Hello Eshan,
You will need to do
global (inside) 1 interface
nat (outside) 1 0 0 outside
Do no forget the outside keyword at the end.
Also you will need to allow the traffic via an ACL on the outside interface
Regards,
Julio
02-10-2012 09:31 PM
Hello Eshan,
You will need to do
global (inside) 1 interface
nat (outside) 1 0 0 outside
Do no forget the outside keyword at the end.
Also you will need to allow the traffic via an ACL on the outside interface
Regards,
Julio
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: