Simple NAT of inside interface from outside

[global-gossip]

Just when I think I've got my head around nat, global and static commands i find myself struggling to get this 'simple' config working...

I have a pretty default config:

interface Vlan1

nameif inside

security-level 100

ip address 10.20.30.50 255.255.255.0

!

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

static (inside,outside) 10.20.30.0 10.20.30.0 netmask 255.255.255.0

I can ping from inside host to outside host and vice versa.

All i want to change is to NAT all traffic coming from the outside network on the inside interface so if i start to ping a host on the inside network from the outside, the traffic appears to come from 10.20.30.50 (my inside interface IP).

I'd appreciate any help.

[Julio Carvajal · Accepted solution]

Hello Eshan,

You will need to do

global (inside) 1 interface

nat (outside) 1 0 0 outside

Do no forget the outside keyword at the end.

Also you will need to allow the traffic via an ACL on the outside interface

Regards,

Julio