11-11-2015 06:42 AM - edited 03-11-2019 11:52 PM
Hello
I have a ASA 5508x. I created a nat for a web server. It works fine. People can get to my webserver from the outside. However this server now can no longer browse the internet. All other computers that are not using nat can browse the internet. I took the nat away and the computer could browse the internet again.
Please help
11-11-2015 07:04 AM
Hi Neville,
Could you please share the sample configuration you are using?
Regards,
Akshay Rastogi
11-11-2015 07:27 AM
11-12-2015 07:51 AM
Hi Nevile,
What i could remember from your earlier configuration, configure specific with your interfaces in your nat statements(do not use any any in interface). Specify exact interface name wherever possible.
For internet traffic have something like :
object net obj-any
subnet 0 0
nat(inside,outside) dynamic interface
For static nats try something like :
object net obj-server
host <webserver internal ip>
nat (inside,outside) static <mapped-ip>
Also when you mention host are able to reach internet w/o nat, does that mean that some other device peforming nating to public ip for internal private hosts?
Regards,
Akshay Rastogi
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide