[c-nsp] ASA NAT problem

Eric Magutu emagutu at gmail.com
Fri Apr 30 00:45:08 EDT 2010


Hi,
Apologies for the cross posting.

I have a problem with a NAT on my network. A private IP has been NATed
to a public IP on my network. The public IP can't be reached from
within my network but it can from outside. I have tried to implement
dns doctoring with no success.
This is what I have added in my config


static (inside,outside) 209.165.201.15 10.1.1.6 netmask 255.255.255.255 dns

policy-map type inspect dns preset_dns_map
parameters
  message-length maximum 2048
policy-map global_policy
class inspection_default
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny
  inspect sunrpc
  inspect xdmcp
  inspect sip
  inspect netbios
  inspect tftp
  inspect http
  inspect icmp
  inspect dns preset_dns_map
!
service-policy global_policy global



How do I verify that the dns rewrite is actually taking place? Is
there something wrong with my config?

-- 
Regards,
Eric Magutu


More information about the cisco-nsp mailing list