[c-nsp] NAT on Cisco ASA

Covalciuc Piotr pkovalchuc at gmail.com
Thu Apr 12 12:49:47 EDT 2012


Hello,

We have a Cisco ASA with 2 interfaces:

   ___int.1___
   |    ASA    |
   -----int.2-----
    /            \
   /              \
SRV1       SRV2


ASA, int1: 172.16.10.1
ASA, int2: 10.10.10.1
SRV1: 10.10.10.101
SRV2: 10.10.10.102

on ASA we have a NAT
nat (int1,int2) source static any any destination static 172.16.10.100
10.10.10.102

The access from the network on int.1 (172.16.10.0) to SRV2 by NATed IP
(172.16.10.100) work fine.
But the access from SRV1 (10.10.10.101) to to SRV2 by NATed IP
(172.16.10.100) doesn't work (timeout).

I know, the servers can communicate through local network (10.10.10.x).
I'd like just to know if the communication between local servers can
be established through NATed IP.
If so, how it should be configured on ASA?

Thanks,
Peter



More information about the cisco-nsp mailing list