Re: Static Nat question on ASA

Dear Habib,

I am afraid that "so this will make 1.1.1.1 IP from Outside to be translated
into 192.168.2.50
for inside" make me puzzled. I think the correct expression may be
192.168.2.50 from inside is translated into 1.1.1.1 at outside.

Or maybe my English is too bad ?

Best regard.

2009/5/5 Nauman Habib <mrnauman_at_gmail.com>

> Dear Fake ,
>
> Please Correct me if i m wrong * ( experts )
>
> It depends on the security level that you are having on the inside and
> outside.
>
> In case of static - you dont need to have 2 maping .
>
> usually SL - for inside is 100 and for outside is 0
>
> static(inside,outside) 1.1.1.1 192.168.2.50 mask 255.255.255.255
>
> so this will make 1.1.1.1 IP from Outside to be translated into
> 192.168.2.50
> for inside
>
> And static is mainly used to ""ALLOW traffic from lower SL to Higher SL
> "".
>
> Although this will also allow for inside to outside maping for these IP's
> as
> well.
>
> Regards,
>
> Nauman
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue May 05 2009 - 14:01:14 ART