Re: Can an ASA 5520 NATed with down stream Network IP Addresses?


"UBEST" <ubest@xxxxxxxxx> wrote in message
news:ek1ha3les16j0f0vh3jqjug9hcd18aouet@xxxxxxxxxx
I usually don't enable routing in switch, will it be OK? Can anyone
double confirm this NAT settings?

Go for it,

The ASA doesn't care if the inside address you want to NAT is directly
connected or x hops away .




thanks so much.

On Thu, 26 Jul 2007 02:22:23 -0000, CK <chetan.kamra@xxxxxxxxx> wrote:

It looks good, but you must be having same route in internal switch
and router as well.



On Jul 26, 6:51 am, UBEST <ub...@xxxxxxxxx> wrote:
Hello there,

Can an ASA 5520 NATed with down stream Network IP Addresses?

Here is propose network Diagram:

Internet (ISP)
|

Cisco Router (207.78.3.1)
207.78.3.X block

|
Cisco 2960 Switch

|

ASA 5520 (Outside 209.78.3.2)
inside 192.168.1.1

| 192.168.1.X

Cisco 2960 Switch

| 192.168.1.X

Cisco Router 192.168.1.2

| 192.168.2.X

Cisco Router

| 10.10.10.X

on ASA 5520 Config, Can I static NAT 207.78,3.X with 10.10.10.X ?

nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 207.78.3.34 10.10.10.34 netmask
255.255.255.255 0 0

route outside 0.0.0.0 0.0.0.0 207.78.3.1 1
route inside 10.10.10.0 255.255.255.0 192.168.1.2 1



.

Relevant Pages