Static NAT problem at an ASA

Apr 30, 2007 1 Replies

Hi



I fight with a problem at an ASA firewall



How do I make internal users to reach the server using the external IP address in this configuration ?



static (inside,outside) 193.a.b.c 10.1.1.5 netmask 255.255.255.255


Best regards



R.B.P



That is difficult to do. In the PIX 6.x series, it was not possible without additional external hardware. I believe it isn't possible in PIX/ASA 7.0 either. There was an intra-interface access enhancement in either 7.2 or 7.1 that -might- have made it possible.

Usually the best thing to do is to have the internal users access by host -name-, and arrange so that when they are inside the network, the host name resolves to the internal IP, and outside, the host name resolves to the external IP.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required