Cisco ASA with Router Cisco + ISP

[lukasz.zamojda]

Hi I've got question about NAT with below configuration on Cisco ASA and Router as well Cisco and ISP

LAB:

Inside LAN > CISCO ASA > Cisco Router external > ISP 




ISP -  public IP bridge mode




Cisco Router external (outside interface) for WAN public IP : 185.0.0.1




Cisco Router (inside interface) - 192.168.0.1




Cisco ASA (outside interface)  (192.168.0.2)




Cisco ASA inside interface for LAN (10.0.0.1)




Lan subnet 10.0.0.0/24 

Question - when I turn on NAT PAT on Cisco ASA do I need second NAT on Cisco external router as well, or only add routes on ASA and Router will be enough  ? 

[Flavio Miranda · Accepted solution]

For internet access the NAT need to be placed on router with the valid IP range 185.0.0.1.

If you do NAT on ASA and not on router, you are going to try the internet using the IP address 192.168.0.x and it will fail.