ASA send traffic out specific IP

Our company has an ASA router that has 9 IP addresses on it. This is my first experience with ASA and all I can say is, "Wow! this is not the normal Cicso command language"

I didn't set this router up and because of my lack of knowledge pertaining to ASA I've been using ASDM and it has served it's purpose up to this point.

Currently all of our traffic is sending out through 207.114.235.181. I want our mail server to send out through 207.114.235.182. I know that this IP address is working on the wan interface because we receive our emails on the 182 address. When I do a show interfaces it only shows the 181 ip address on the wan interface. I've browsed all through the ASDM and can't find any mention of the 8 other IP addresses that are currently routing traffic our mailservers, webservers, etc... The only place that these IP addresses show up is in the running config is as an Object-Group:

object-group network DM_INLINE_NETWORK_1
   network-object host 207.114.235.183
   network-object host 207.114.235.184
   network-object host 207.114.235.185
   network-object host 207.114.235.186
   network-object host 207.114.235.187
   network-object host 207.114.235.188
   network-object host 207.114.235.190
   network-object host 207.114.235.192

This is all probably normal, but I'm a novice at this stuff.

I set NAT policies to route inbound traffic to our servers that host public services all the time using ASDM. But, configuring the router to send traffic out a specific wan IP when the traffic is coming from a specific server's IP has got me stumped.




LVL 2
David11011Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SuperTacoCommented:
The other Ip addresses will show as network objects.  is three a specific reason you want to send mail thorugh this address/  You can always create a static route.  that hos only been successful for me if I want to send email of web only traffic through a different ISP
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MikeKaneCommented:
>> When I do a show interfaces it only shows the 181 ip address on the wan

That's correct.  The SHOW INT on the asa will show you the currently assigned ASA interfaces.      The other IPs you have available can be used for 1 to 1 static NATs or port forwards.  

For mail, you would usually do a 1 to 1 static nat (basically a port forward of all ports).  

When you assign a static NAT, all traffic is sent outbound on that IP.   Any traffic coming into the ASA on that IP will be forwarded into the internal host (if the ACL allows it).  

This will give you an idea of how to do a NAT in post 8.3 code.  

https://supportforums.cisco.com/docs/DOC-9129
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.