Cisco ASA NAT questions

From: Marcin Zgola <MZgola_at_netrixllc.com>
Date: Wed, 8 Sep 2010 15:48:45 +0000

I need some help with NAT configuration for ASA. Maybe someone have done this before.

Here is the basic info

INSIDE NETWORKS
10.0.1.0 /24
10.0.2.0 /24
10.0.3.0 /24
10.0.4.0 /24

OUTSIDE PUBLIC IP
100.100.100.0 /24

Here is what I need

Nat (inside) 101 10.0.1.0 255.255.255.0
Nat (inside) 101 10.0.2.0 255.255.255.0
Nat (inside) 101 10.0.3.0 255.255.255.0
Nat (inside) 101 10.0.4.0 255.255.255.0
Global (outside) 101 100.100.100.1-100.100.100.4

Here when it gets complicated.

I want any hosts from 10.0.0.0/24 to be PATed from one of the public ips from 100.100.100.0-100.100.100.4 pool

Example:
Host 10.0.1.122 PATed to 100.100.100.1
Host 10.0.1.12 PATed to 100.100.100.1
Host 10.0.2.123 PATed to 100.100.100.2
Host 10.0.3.188 PATed to 100.100.100.3

What is happening is that with this configuration my IPS are being NATed.

Can some one advice?

Thanks

Blogs and organic groups at http://www.ccie.net
Received on Wed Sep 08 2010 - 15:48:45 ART

This archive was generated by hypermail 2.2.0 : Fri Oct 01 2010 - 05:58:05 ART