08-10-2011 06:33 AM - edited 03-11-2019 02:09 PM
Dear Boss
Plz see attached diagram. I have Static NAT on ASA 5520 for mail server and proxy server. I can use it from internet. now i want to Static NAT for 192.168.0.0/24. I mean 192.168.0.241-> 172.29.0.5, 192.168.0.242->172.29.0.6 so on.
I want when 192.168.0.10 hit 192.168.0.241 it goes to 172.29.0.5.
just simple static NAT. which command i need at ASA ?
what is GW of 192.168.0.10 pc ?
Pls suggest me
shahid
08-10-2011 06:52 AM
Check the Regular Static NAT
https://supportforums.cisco.com/docs/DOC-9129
08-10-2011 06:53 AM
which ASA version ?
if its 8.x use the bellwo example
asusming the interface to 192.168.x.x is named outside and 172.29.x.x is named inside ( if the name is diffrent just use the name in you ASA )
The following example configures static NAT for the real host 172.29.0.5 on the inside to 192.168.0.241on the outside using a mapped object.
hostname(config)# object network my-mapped-obj
hostname(config-network-object)# host 172.29.0.5
hostname(config-network-object)# nat (inside,outside) static 192.168.0.241
if its version 7.x
static (inside,outside) 192.168.0.241 172.29.0.5 netmask 255.255.255.255
Note:
Because the outside interface has a lower security level than the DMZ, an access list must also be created in order to permit users on the outside access to the server on the DMZ. The access list must grant users access to the
mapped address in the static translation Note: Because the outside interface has a lower security level than the DMZ, an access list must also be created in order to permit users on the outside access to the server on the DMZ. The access list must grant users access to the mapped address in the static translation
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008046f31a.shtml#s11
HTH
if helpful Rate
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide