• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 591
  • Last Modified:

ASA send traffic out specific IP

Our company has an ASA router that has 9 IP addresses on it. This is my first experience with ASA and all I can say is, "Wow! this is not the normal Cicso command language"

I didn't set this router up and because of my lack of knowledge pertaining to ASA I've been using ASDM and it has served it's purpose up to this point.

Currently all of our traffic is sending out through 207.114.235.181. I want our mail server to send out through 207.114.235.182. I know that this IP address is working on the wan interface because we receive our emails on the 182 address. When I do a show interfaces it only shows the 181 ip address on the wan interface. I've browsed all through the ASDM and can't find any mention of the 8 other IP addresses that are currently routing traffic our mailservers, webservers, etc... The only place that these IP addresses show up is in the running config is as an Object-Group:

object-group network DM_INLINE_NETWORK_1
   network-object host 207.114.235.183
   network-object host 207.114.235.184
   network-object host 207.114.235.185
   network-object host 207.114.235.186
   network-object host 207.114.235.187
   network-object host 207.114.235.188
   network-object host 207.114.235.190
   network-object host 207.114.235.192

This is all probably normal, but I'm a novice at this stuff.

I set NAT policies to route inbound traffic to our servers that host public services all the time using ASDM. But, configuring the router to send traffic out a specific wan IP when the traffic is coming from a specific server's IP has got me stumped.




0
David11011
Asked:
David11011
2 Solutions
 
SuperTacoCommented:
The other Ip addresses will show as network objects.  is three a specific reason you want to send mail thorugh this address/  You can always create a static route.  that hos only been successful for me if I want to send email of web only traffic through a different ISP
0
 
MikeKaneCommented:
>> When I do a show interfaces it only shows the 181 ip address on the wan

That's correct.  The SHOW INT on the asa will show you the currently assigned ASA interfaces.      The other IPs you have available can be used for 1 to 1 static NATs or port forwards.  

For mail, you would usually do a 1 to 1 static nat (basically a port forward of all ports).  

When you assign a static NAT, all traffic is sent outbound on that IP.   Any traffic coming into the ASA on that IP will be forwarded into the internal host (if the ACL allows it).  

This will give you an idea of how to do a NAT in post 8.3 code.  

https://supportforums.cisco.com/docs/DOC-9129
0

Featured Post

Choose an Exciting Career in Cybersecurity

Help prevent cyber-threats and provide solutions to safeguard our global digital economy. Earn your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now