The FDM Equivalent of selecting a public IP for PAT not directly connected to the outside interface.

[cisco-noob]

Hello,

Any help with this is greatly appreciated. We just recently purchased the Firepower 1010. I am trying to specify a public IP address that is not directly connected to my outside interface. For example, in the 5540, you can select use PAT, then specify a public IP address like the image below. I have been stumped for over a week on how to do this. The answer is probably obvious. Thanks to anyone that can figure this out. 

 

[LikeMyFloydPink]

Use a /32  (255.255.255.255) subnet mask.  That may or may not be the answer - is it behind another router or something?  What is your use-case? 

EDIT: Are you just trying to get past the wizard screen shown above?  I seriously don't know nor am I a NetSec guy. But if it is not directly connected and you are just trying to get it up and running, you could even use an RFC1918 address for the interim. 

[johnlloyd_13 · Accepted solution]

hi,

you can go in FDM: policies > NAT.

select type: dynamic > under original packet: select the "inside" interface and source address (or create new).

under translated packet: select source address (or create new). leave the rest as "any".

[cisco-noob]

Thanks again!

I came up with the following rule and I hope that I understood you correctly. I will be deploying my configuration on Wednesday, hopefully, it goes well.