|
|
Question : How to map external ip to internal subnet on a Cisco ASA
|
|
|
|
So, I've got two external IP's and two internal subnets. I'd like each internal subnet to have its own external IP. Currently both are using one main IP.
Lets say my external IP's are 10.0.0.1(outside) and 10.0.0.2, and my internal subnets are 192.168.1.0(sub1) and 192.168.2.0(sub2). If I wanted to separate it and have the internal subnet of 192.168.2.0 use 10.0.0.2 as its external IP, what would I have to do?
Would I just have to do something like this?
global 2 10.0.0.2 netmask 255.255.255.255 nat (sub2) 2 0.0.0.0 0.0.0.0
Sorry if I'm way off, I've just never done this before. I've NAT'd to a host before, but not a whole subnet.
|
|
|
|
Answer : How to map external ip to internal subnet on a Cisco ASA
|
|
if all the traffic are initiating from those two subnets then the NAT command is right.
nat (sub2) 2 0.0.0.0 0.0.0.0 global (outside) 2 10.0.0.2 netmask 255.255.255.255
nat (sub1) 1 0.0.0.0 0.0.0.0 global (outside) 1 10.0.0.1 netmask 255.255.255.255
here Sub1 : network 1 (192..168.1.0) sub2 : network 2 (192.168.2.0) outside : outiside interface (10.0.0.x/x)
|
|
|