Avatar of masdf123
masdf123

asked on 

Cisco ASA 8.3 Configuration

Hi,

I am using ASA 5505 8.3

Setup is as follows:

2 Vlans. inside and Outside.

Outside
1.1.1.38 255.255.255.248
route outside 0.0.0.0 0.0.0.0 1.1.1.37 1

Inside:
10.1.1.1 255.255.255.0

object network obj_any
 nat (inside,outside) dynamic interface

object network obj_any
 subnet 0.0.0.0 0.0.0.0

object network PC
 host 10.1.1.39

object network PC
 nat (inside,outside) static 1.1.1.39

10.1.1.39 can access the internet using => 1.1.1.39 fine.
All others can access the internet using 1.1.1.38 fine.

So when I add a ACL example:
access-list outside_in extended permit tcp any 10.1.1.39 eq smtp
access-group outside_in in interface outside

Outside smtp traffic is getting in fine (to PC 10.1.1.39). So far everything is functional.

Now, I have a PC2 (10.1.1.50) trying to access 10.1.1.39 using its public IP (1.1.1.39) which doesn't work.

It only works using the private IP: 10.1.1.39 and not the 1-to-1 public IP 1.1.1.39

Can you please assist and getting this to work using public and private IP both. Or this is not possible?

Thanks
CiscoHardware FirewallsRouters

Avatar of undefined
Last Comment
Ernie Beek

8/22/2022 - Mon