Re: Static Nat question on ASA

NO

As shahid has stated clearly ; the Static statment goes like this :

static(Real Interface, Mapped Interface) "mapped ip" "real ip" netmask

so by your commands :

static(inside,outside) 1.1.1.1 192.168.2.50 mask 255.255.255.255
~~ you are maping 1.1.1.1 from outside to 192.168.2.50 in inside

static(inside,outside) 192.168.2.50 1.1.1.1 mask 255.255.255.255

~~ and this is maping 192.168.2.50 from outside to 1.1.1.1 in inside

so these lines are not the same

Try to study from this link

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/cfgnat.html#wp1043190

Regards,

Nauman

Blogs and organic groups at http://www.ccie.net
Received on Tue May 05 2009 - 13:22:24 ART