cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
187
Views
0
Helpful
2
Replies

Source Based Destination NAT in FTD

MSJ1
Level 1
Level 1

Problem Details:

Configured 2 Destination NAT as per below

nat (Inside,Outside) source static 10.8.55.229 199.19.3.64 unidirectional
nat (Inside,Outside) source static 10.8.55.229 199.19.5.67 unidirectional

Following plan below configured above 2 lines.

1. if Source is 199.19.3.63 ( this IP at other side of the Site to Site VPN - A Side ) then at B Side of the VPN DNAT will be 199.19.3.64 to 10.8.55.229
2. if Source is 199.19.5.67 ( this IP at other side of the Site to Site VPN - A Side ) then at B Side of the VPN DNAT will be 199.19.5.68 to 10.8.55.229

So Original Destination is same for both NAT statement at B Side. So my question is how do I define each Source in each NAT Line ? Is it doable ?

2 Replies 2

Hello


@MSJ1 wrote:

1. if Source is 199.19.3.63 ( this IP at other side of the Site to Site VPN - A Side ) then at B Side of the VPN DNAT will be 199.19.3.63 to 10.8.55.229 199.19.3.64
2. if Source is 199.19.5.67 ( this IP at other side of the Site to Site VPN - A Side ) then at B Side of the VPN DNAT will be 199.19.5.68 to 10.8.55.229 199.19.5.67



The return traffic from B side should not be aware of 10.8.55.x so any return traffic will be to 199.19.3.64/67



@MSJ1 wrote:99.19.5.68 to 10.8.55.229

So Original Destination is same for both NAT statement at B Side. So my question is how do I define each Source in each NAT Line ? Is it doable ?


Edited: apologies my question was not clear-
Do you mean translation based on source & destination address ?

example below

object network insidehost
host 10.8.55.229

object network destinationhost1
host 199.19.3.63

object network destinationhost2
host 199.19.3.68

object network natip1
host 199.19.3.64

object network natip2
host 199.19.3.67


nat (inside,out) source static insidehost natip1 destination static destinationhost1 destinationhost1
nat (inside,out) source static insidehost natip2 destination static destinationhost2 destinationhost2


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

nat (out,in) source static remoteLAN1 remoteLAN1 destination static <mapp server IP1> <real IP>

 

nat (out,in) source static remoteLAN2 remoteLAN2 destination static <mapp server IP2> <real IP>

MHM

Review Cisco Networking for a $25 gift card