06-25-2012 06:46 AM - edited 03-07-2019 07:26 AM
Hi there,
I have CISCO ASA 5520 and I'm using ASDM 6.1
so here's a problem, I have configured 2 interfaces (LAN, NET) with these IP (offcourse here they're not real, but last numbers and subnets are correct):
LAN: 192.168.5.1 255.255.255.0
NET: 123.123.123.202 255.255.255.224
I want to do one thing, I have server with IP 192.168.5.5 and how to do properly, that from outside my LAN when ppl types 123.123.123.205 it goes right to 192.168.5.5 and offcourse when server goes outside it gets 123.123.123.205
hope somebody understood what I mean and can help me?
06-25-2012 07:08 AM
If you're running on version 6.2 or lower, you can do static nat:
static (inside, outside) 123.123.123.205 192.168.5.5 mask 255.255.255.255
In your outside acl, you'd allow whatever traffic you want in:
access-list outside permit tcp any host 123.123.123.205 eq 80
HTH,
John
06-25-2012 09:42 PM
Thank You for quick answer.
But then there's again a question, how to do proper static nat?
I create one static nat rule, in original source there's my real address 192.168.5.5 and it's on LAN (inside) interface, and translated address is 123.123.123.205 is on NET (outside).
But it won't work... what I'm doing wrong?
06-26-2012 02:19 AM
that's it I got it,
I was trying to look from inside LAN if outside IP works, and ASA has problem with that, so everything's fine now thank You for help
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide