cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

339
Views
1
Helpful
1
Replies
global-gossip
Beginner

Simple NAT of inside interface from outside

Just when I think I've got my head around nat, global and static commands i find myself struggling to get this 'simple' config working...

I have a pretty default config:

interface Vlan1

nameif inside

security-level 100

ip address 10.20.30.50 255.255.255.0

!

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

static (inside,outside) 10.20.30.0 10.20.30.0 netmask 255.255.255.0

I can ping from inside host to outside host and vice versa.

All i want to change is to NAT all traffic coming from the outside network on the inside interface so if i start to ping a host on the inside network from the outside, the traffic appears to come from 10.20.30.50 (my inside interface IP).

I'd appreciate any help.

1 ACCEPTED SOLUTION

Accepted Solutions
Julio Carvajal
Advisor

Hello Eshan,

You will need to do

global (inside) 1 interface

nat (outside) 1 0 0 outside

Do no forget the outside keyword at the end.

Also you will need to allow the traffic via an ACL on the outside interface

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

View solution in original post

1 REPLY 1
Julio Carvajal
Advisor

Hello Eshan,

You will need to do

global (inside) 1 interface

nat (outside) 1 0 0 outside

Do no forget the outside keyword at the end.

Also you will need to allow the traffic via an ACL on the outside interface

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Create
Recognize Your Peers
Content for Community-Ad