Solved

cisco ASA 5505

Posted on 2007-11-14
2
714 Views
Last Modified: 2012-10-21
How to configure cisco ASA 5505 NAT between two hosts/machines?
0
Comment
Question by:nsamri
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 28

Accepted Solution

by:
batry_boy earned 125 total points
ID: 20285991
Assuming the following values:

inside native IP address - 192.168.1.20
outside translated IP address - 1.1.1.1

Here is the command to translate the inside host at 192.168.1.20 to 1.1.1.1 when sending traffic to any host on the outside interface:

static (inside,outside) 1.1.1.1 192.168.1.20 netmask 255.255.255.255

If you want to translate that same inside host for traffic going to a host in a dmz network and you want to use it's own native IP address (192.168.1.20) for the translation, then you can use:

static (inside,dmz) 192.168.1.20 192.168.1.20 netmask 255.255.255.255

In this fashion, any machine on the dmz subnet will see the inside host as it's native IP address.
0
 
LVL 32

Assisted Solution

by:harbor235
harbor235 earned 125 total points
ID: 20290868

You must be running 7.x or 8.x code on this ASA so make sure the following is also in place.

make sure you have the command "nat-control" in your config, otherwise the above config
commands will not work. Nat-control is disabled by default. Also, if you want NAT overload on the outside interface the above config will need some additional commands.

for instance;

nat (inside) 1 192.168.1.0 255.255.255.0
global (outside) 1 interface

Also, do not forget to add appropriate access-lists if outside initiated traffic is allowed in.

Here is a good doc:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/cfgnat.html#wp1042823

HARBOR235 ;}

harbor235 ;}



0

Featured Post

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ARP not working as expected 11 80
2-Factor authentication VPN for staff and suppliers 6 92
QoS on Cisco router 10 59
Need to cut my Verizon home cost 3 64
Creating an OSPF network that automatically (dynamically) reroutes network traffic over other connections to prevent network downtime.
This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question