NAT FDM Configuration Outside - Inside

S3C · ‎02-11-2022

Hello!

I cant seem to get my NAT to work and i cant figure out what im doing wrong...

I want to be able from the internet to access a server. Internet -> FDM (outside) -> Esxi (inside) -> Specific Server (so any to any dont work) and i want to specify the servers IP so its only natting to that specific server and not the everything on that interface.

Also i can ping the specific server.

Original packet

--------------

Source Interface: outside

Source address: outside_internet (host, IP of ISP)

Source Port: Any (supposed to be http & https)

Destination Address: Any

Destination Port: Any

Translated Packet

--------------

Source Interface: inside

Source address: Server (host)

Source Port: Any (supposed to be http & https)

Destination Address: Any

Destination Port: Any

ACL

-------

ACL is correct, from internet to the host with any on ports.

Events

--------

No connection is coming in to the specific server to there´s no ACL blocking

---------------

Feels like ive tried all combinations and checked other peoples guides and setups, which none work. So I just wanna make sure NAT is 100 % correct before troubleshooting elsewhere.

balaji.bandi · ‎02-11-2022

we use most cases FMC to that but its near by same :

check the below guide to help you:

https://www.petenetlive.com/KB/Article/0001680

https://integratingit.wordpress.com/2020/02/08/ftd-configuration-using-fdm/

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

S3C · ‎02-11-2022

Yeah, ive done exactly like those guides above and still dont work. Ive also tried it outside to inside as it should be but still wont work . Therefore im questioning if above is really correct then my problem is elsewhere maybe at my ISP.

Georg Pauwen · ‎02-12-2022

Hello,

as far as I recall, the packet tracer command equivalent is something like 'show packet-capture number trace detail', if you can get to that output, that usually tells you where the problem is...