ASA 5505 NAT/PAT static Question

Hi NG,

i got following problem to solve:

I got one single public ip address where by i PAT all my internal

192.168.X.Y networks. I got one DMZ interface using 192.168.2.X. I got internal hosts as example 192.168.3.X.

now with the following config, my hosts from the internal network as well as the dmz hosts can get out to 0.0.0.0 without a problem.

My current problem is, that i cannot connect from my internal 192.168.3.X network via my outside PAT address on to services with are hostet in the DMZ (192.168.2.X) what is the correct "static" config for connecting from inside via PAT address into my DMZ ?

global (outside) 1 interface nat (inside) 0 access-list inside_nat0_outbound nat (inside) 1 0.0.0.0 0.0.0.0 nat (dmz) 1 192.168.2.0 255.255.255.0 static (dmz,outside) tcp interface www 192.168.2.XX www netmask

255.255.255.255 read more and respond »

Posted 5 years ago by Colin Cant in Cisco Systems

Report misuse

Image for ASA 5505 NAT/PAT static Question