Solved

cisco ASA 5505

Posted on 2007-11-14
2
716 Views
Last Modified: 2012-10-21
How to configure cisco ASA 5505 NAT between two hosts/machines?
0
Comment
Question by:nsamri
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 28

Accepted Solution

by:
batry_boy earned 125 total points
ID: 20285991
Assuming the following values:

inside native IP address - 192.168.1.20
outside translated IP address - 1.1.1.1

Here is the command to translate the inside host at 192.168.1.20 to 1.1.1.1 when sending traffic to any host on the outside interface:

static (inside,outside) 1.1.1.1 192.168.1.20 netmask 255.255.255.255

If you want to translate that same inside host for traffic going to a host in a dmz network and you want to use it's own native IP address (192.168.1.20) for the translation, then you can use:

static (inside,dmz) 192.168.1.20 192.168.1.20 netmask 255.255.255.255

In this fashion, any machine on the dmz subnet will see the inside host as it's native IP address.
0
 
LVL 32

Assisted Solution

by:harbor235
harbor235 earned 125 total points
ID: 20290868

You must be running 7.x or 8.x code on this ASA so make sure the following is also in place.

make sure you have the command "nat-control" in your config, otherwise the above config
commands will not work. Nat-control is disabled by default. Also, if you want NAT overload on the outside interface the above config will need some additional commands.

for instance;

nat (inside) 1 192.168.1.0 255.255.255.0
global (outside) 1 interface

Also, do not forget to add appropriate access-lists if outside initiated traffic is allowed in.

Here is a good doc:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/cfgnat.html#wp1042823

HARBOR235 ;}

harbor235 ;}



0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This past year has been one of great growth and performance for OnPage. We have added many features and integrations to the product, making 2016 an awesome year. We see these steps forward as the basis for future growth.
On Feb. 28, Amazon’s Simple Storage Service (S3) went down after an employee issued the wrong command during a debugging exercise. Among those affected were big names like Netflix, Spotify and Expedia.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses
Course of the Month3 days, 21 hours left to enroll

630 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question