Re: Cisco ASA NAT questions

Is this with an ASA?
If so, you can specify a nat id with an acl, that matches a global ip address to get PAT'd as.

Access-list 1 permit 10.0.1.0 255.255.255.0
Nat 1 (inside) access-list 1
Global 1 100.100.100.1

And so on.

Regards,
Jay McMickle- CCNP,CCSP,CCDP
Sent from my iPhone

On Sep 8, 2010, at 10:48 AM, Marcin Zgola <MZgola_at_netrixllc.com> wrote:

> I need some help with NAT configuration for ASA. Maybe someone have done this before.
>
> Here is the basic info
>
> INSIDE NETWORKS
> 10.0.1.0 /24
> 10.0.2.0 /24
> 10.0.3.0 /24
> 10.0.4.0 /24
>
> OUTSIDE PUBLIC IP
> 100.100.100.0 /24
>
> Here is what I need
>
> Nat (inside) 101 10.0.1.0 255.255.255.0
> Nat (inside) 101 10.0.2.0 255.255.255.0
> Nat (inside) 101 10.0.3.0 255.255.255.0
> Nat (inside) 101 10.0.4.0 255.255.255.0
> Global (outside) 101 100.100.100.1-100.100.100.4
>
> Here when it gets complicated.
>
> I want any hosts from 10.0.0.0/24 to be PATed from one of the public ips from 100.100.100.0-100.100.100.4 pool
>
> Example:
> Host 10.0.1.122 PATed to 100.100.100.1
> Host 10.0.1.12 PATed to 100.100.100.1
> Host 10.0.2.123 PATed to 100.100.100.2
> Host 10.0.3.188 PATed to 100.100.100.3
>
> What is happening is that with this configuration my IPS are being NATed.
>
> Can some one advice?
>
> Thanks
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Wed Sep 08 2010 - 16:46:46 ART