rupesh_kashyap wrote:
Hi, I have one Cisco ASA . IP address are->>outside ( ip address 202.86.91.98/28) & inside (ip address 172.19.3.4 /28).
I am seeing two static nat. One is static (inside,outside) which is working fine & routing to my internal host 10.50.33.43.
My concern is second nat, static (outside,inside). 206.201.76.5 is on global network. I want to know how outside,inside nat will work? Will any traffic coming from 206.201.76.5 translated as source IP as 172.19.128.18. I am really confused.
static (inside,outside) 202.86.91.125 10.50.33.43 netmask 255.255.255.255
static (outside,inside) 172.19.128.18 206.201.76.5 netmask 255.255.255.255
route outside 0.0.0.0 0.0.0.0 202.86.91.97
route inside 10.0.0.0 255.0.0.0 172.19.3.1
route inside 172.19.0.0 255.255.0.0 172.19.3.1
Rupesh
static NAT statements are bi-directional so -
static (inside,outside) 202.86.91.125 10.50.33.43 netmask 255.255.255.255
means -
1) if a packet arrives on the inside interface with a source address of 10.50.33.43 then change the source address 202.86.91.125.
2) if a packet arrives on the outside interface with a destination address of 202.86.91.125 then change the destination address to 10.50.33.43
static (outside,inside) 172.19.128.18 206.201.76.5 netmask 255.255.255.255
means -
1) if a packet arrives on the inside interface with a destination address of 172.19.128.18 change the destination address to 206.201.76.5
2) if a packet arrives on the outside interface with a source address of 206.201.76.5 then change the source address to 172.19.128.18
Notice the difference between the two.
The first is translating source addresses from the inside and destination addresses from the outside.
The second is translating destination addresses from the inside and source addresses from the outside.
Jon
