Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I want to configure a NAT Statement on a FWSM so that traffic initiated by an end user to a server with an IP Address of 10.20.x.x network will access it via a corresponding 10.60.x.x address. But, I want all communications initiated by the server t...
A bit of background, I am running Redundant FWSMs in Mutli-Context Routed Mode. Currently the FWSM has 6 partitions, each with at least one context, but some have more space if I issue a "show resource acl-partition". Is there anyway to designate w...
Would instead of having static (inside,outside) 10.20.60.60 access-list NATcould I instead havenat (inside) 0 10.20.60.60 255.255.255.255 0 0or would the first static take presidence over the generic?Thanks again,Clayton
I am not sure if I am reading this correctly.Would you want the ACL to be access-list NAT extended permit ip any host 10.60.60.60 (for any user trying to access the server?)Also for the "static (inside,outside) 10.60.60.60 access-list NAT" ...
Nick,If your DNS server lies outside of the ASA (4.2.2.1 for example), you will have to also allow DNS outbound. Are you browsing via IP Address or FQDN?