Friday, October 12, 2018

Basic policy NAT question - ASA 8.2.5(59)

I think this probably a dumb question. I want an IP to be natted to one IP when it goes out the internet interface, and another IP when it goes out a different interface. I have two policy NAT access lists like so (made up IPs):

access-list NAT3 extended permit ip host 172.17.10.10 any

That's for traffic to the internet and it gets natted to a dedicated public IP.

access-list NAT4 extended permit ip host 172.17.10.10 188.188.188.0 255.255.255.0

That's for the other interface and it gets translated to a different IP.

The NAT3 access list grabs all traffic and shoves it out to the internet as you might expect, so nothing ever goes through the other interface even when IPs match.

Just wondering what's the best way to do this. No lectures about the version please, I know.



No comments:

Post a Comment