Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have been using static NAT to map between a single server behind an ASA 5505 and a single public IP address. In other words, I've been doing this:object network NAT_ME nat (inside,outside) static interfaceNow I would like to start using the clientl...
I am using static NAT (nat (inside,outside) static interface) between a single host on the inside to the DHCP address being used on the outside interface. The inside interface has security-level of 100, and the outside has security-level of 0. My und...
Now I have a set of commands that looks like this (this is just a small excerpt):object network OUTBOUND_NAT host 10.0.0.10object network ISA_EXCH host 10.0.0.10...object network OUTBOUND_NAT nat (inside,outside) dynamic interfaceobject network ISA_E...
Sadly, that's what I thought. I seem to have that setup working now. I don't have that many ports, I suppose, but this just seems like a pretty clumsy way to do it.It appears that the ASA is preserving the source port, even when I use "dynamic" -- is...
Jennifer, thanks for pointing that out. At one point, I didn't have the access-group stuff in there at all, and things weren't working...but at that point, I must have had another error that I have since corrected. Once I remove those lines, everythi...
Thanks for your reply. I have included my config below. You will see some ACLs that I created that are now inactive -- when they were active, everything worked. I replaced them with the single global ACL for convenience right now while I sort everyth...