Static nat issue on ASA (v8.2) ?

[vucko-sanel]

Tring to add a new static nat rules, but it seems that i an not able to do that

10.10.10.10 Public IP

20.20.20.20 inside LAN IP

trying to add:

fw(config)# static (inside,outside) tcp 10.10.10.10  https 20.20.20.20 https netmask 255.255.255.255

ERROR: mapped-address conflict with existing static

  inside:20.20.20.20 to outside:10.10.10.10 netmask 255.255.255.255

The rule with the same public IP existing already but pointing to the diffrent Internal LAN IP:

static (inside,outside) 10.10.10.10 20.20.20.21 netmask 255.255.255.255

Please advice how to solve this.

Thanks!

[rizwanr74 · Accepted solution]

Hi Vucko,

Please change your existing static-nat to a particular port instead of leave it as ip-to-ip nat.

"static (inside,outside) 10.10.10.10 20.20.20.21 netmask 255.255.255.255"

And then you can add second static nat to different IP (i.e inside ip) and it will take it and it should work.

thanks

Rizwan Rafeek.

[vucko-sanel]

Thanks Rizwan i managed to imeplement rules like you have mentioned in your post above!