Cisco Firewall :: 870 - Possible To Do Static NAT Which Can Translate To A

Nov 30, 2011

I have a firewall which is conntect to a Cisco 870 router.
The router only allows one ip address to ssh into and it which is but the interface which is connected to the router is on the firewall is a and the router interface is a
I can ping the router from the inside of my firewall, but I can't ssh into it at is has a access list which will only allow ssh from the ip address
Would it be possible to do a static NAT which can translate the to a when I ssh into the router when coming from the inside?

View 11 Replies


Cisco Firewall :: How To Translate Both Source And Destination In ASA 8.2

Apr 16, 2012

I have a internal subnet sitting behind an ASA firewal 8.2 and would behind accessing to web server which sits behind the outside interface of the ASA firewall.The access would be like this:
1) will be accesing to the web server
2) We would like to translate the source to the firewall outside IP address
3) We would like to translate the destination web server to as well

How to perform this simultaneous source and destnation address translation in ASA firewall 8.2? Could this be done in ASA firewall 8.2?

View 1 Replies View Related

Cisco Firewall :: Can ASA 5555 Translate To Secondary IP Address Block

Oct 14, 2012

I just purchased an ASA 5555 and started to configure.  I was successful in natting all the IPs that are on the same subnet as the ASA eth0.  I could not get the nat working for the 2nd address block.
interface GigabitEthernet0/0
nameif outside
security-level 0
ip address

View 4 Replies View Related

Cisco Firewall :: ASA 8.4 / Translate Port 80 From Outside Connection On Port 85 In LAN Server?

Dec 27, 2011

i must translate port 80 from outside connection on port 85 in lan server? how can i configure the asa firewall rules for complete this task?

View 4 Replies View Related

Cisco WAN :: 1760 To Translate Existing Qos

Jan 21, 2013

I currently have a pair of Adtran Netvanta 1224R units that I want to replacce with Cisco 1760 routers. How can I translate the existing QoS (relevant sections below) on the Adtrans to work.

View 2 Replies View Related

Cisco VPN :: 5520 - How To Translate One Inside Address To Another

Oct 23, 2011

I guess I'll start with the easy stuff, Cisco ASA 5520 ver 8.2, ASDM ver 6.2, IPSec L2L tunnel with overlapping private IPs.
I have about a dozen L2L connections on our 5520 but never had to do one with overlapping IPs. I have two that I have to build and one definitely overlaps our inside locals, and the other is requesting that we NAT our inside locals to a 10.x.x.x.
I've searched the board and found several good posts including document 112049, but I just don't seem to be able to get my head around how to translate one inside address to another. It would seem like is would be as easy as doing an (inside,inside) static NAT, but most everything has the solution as a policy NAT or doing an (inside, outside) but in the less secure address space place the name of an ACL. I have ordered that brick of a book on ASAs from Cisco Press, but need to get something going and I'm not having much luck getting this thing up and running.
Perhaps my basic understanding of NAT rules is wrong. I thought that when using NAT the command speaks to the interfaces and the direction of travel, (inside,outside). I also thought that the IP adresses used must be valid on the interface refferenced, so any refference to "inside" would have to be an address on the "inside interface of the FW and likewise for the "outside" interface. Finally, to be sure I'm not calling a duck a goose my understanding is that the following are correct; "inside local" = my private, "inside global= my peer, "outside local"= their private, "outside global"= their peer.
So if I'm translating say a 192.x.x.x on my inside local and wanted to present them a 10.x.x.x, wouldn't I need an (inside,outside)? And even though I'm translating my private IP into a different private IP, the translated IP must be on the "outside" interface because that is the interface that I want to present the new private IP on?
So for the scenario I suggested at the top where I need to translate my private 192.x.x.x into a 10.x.x.x and present that 10.x.x.x to the other side, I need something like NAT Static (inside,outside) 10.x.x.x  192.x.x.x?

View 8 Replies View Related

Auto-translate Selected Text In IE 7?

Jun 19, 2011

chrome has an application that auto translates any text that is selected, directly in the there something similar for IE7? I dont wanna install some toolbar or any visible program, just a program similar to the chrome application, that translates selected text and displays it in a pop up.

View 3 Replies View Related

Cisco WAN :: 1941 Cannot Translate Private To Public IP Address Using NAT

May 4, 2012

I have 5 workstations with 2 servers but the backup server (black) is shut down intentionally.I have 1 cisco gigabit unmanaged 8 port switch and 1 cisco 1941 vpn router.The cisco 1941 vpn router is configured for IPVPN connection to other branches.

1. Configure NAT to enable the 5 workstations to be connected to the internet thru the router to the ISP.
2. Configure NAT to enable the server to be accessed from outside using the public IP address provided by the ISP. [code]


1. I can ping other pc on network.
2. When I typed in the ISP's public ip address on the browser, i got into the modem user interface for configuration.
I still can't connect to the internet. When i do tracert, it stops on the hop and didnt continue. This shouldn't be the case since i want to connect using the GE0/1 outside port for the internet.

View 6 Replies View Related

Cisco Firewall :: 3389 Static NAT Ports PIX Firewall

Jul 11, 2011

There is a PIX firewall and it has this configured on it.static (inside,outside) tcp interface 3389 3389 netmask 0 0.This line of code works ok for port 3389 but I want all tcp ports to be translated.  Not just 3389. 

View 2 Replies View Related

Cisco WAN :: 1760 Translate Existing QoS On Adtrans To Work On Routers

May 1, 2013

I currently have a pair of Adtran Netvanta 1224R units that I want to replacce with Cisco 1760 routers. How can I translate the existing QoS (relevant sections below) on the Adtrans to work on the Cisco routers.

View 3 Replies View Related

Cisco WAN :: 1941 When Check NAT Translation On Router / It Does Translate Packets

May 15, 2012

Few are the issues that I am facing on IOS Version 15 and Cisco 1941 Router , this router is currently in production on clients.
•1. I do PAT on router interface , and it has public IP on it , when I send request to Internet via Browser from LAN client , Page does not open and when I check  NAT TRANSLATION on router , Router does translate the packets. The work around I found is that when I disabled CEF on router , Web starts browsing ,  Why does this happen and why I need to disable CEF ? 
 •2.I have Public IP Pool its subnet mask is /29 , one of the Public IP from this pool is live on the interface. When I perform STATIC NAT a web server resides in LAN , then I can access this server from anywhere in the world by IP. After few days Static NAT stopped working , I again Static NAT it on other Public IP , the same issue rise again , I am not able to access this server from Internet. This issue has been faced at two clients.   The same pool i have checked on 1841 router and static nat works fine on the same public IP .  

View 2 Replies View Related

Cisco Switching/Routing :: Translate Inside Network Of To Outside ISP Address On ASA 5505

Oct 2, 2012

I'm trying to translate my inside network of to my outside ISP address on ASA 5505. The ping from all hosts to works, but it still only let's one address out to translate.My configuration is:
global (outside) 1 interface
nat (inside) 1
still doesn't work.

View 2 Replies View Related

Cisco Switching/Routing :: Translate Inside Network Of To Outside ISP Address On ASA 5505?

Oct 2, 2012

I'm trying to translate my inside network of to my outside ISP address on ASA 5505. The ping from all hosts to works, but it still only let's one address out to translate.My configuration is:
global (outside) 1 interface
nat (inside) 1
still doesn't work.

View 3 Replies View Related

Cisco Application :: CSS11503 / Make NAT From Inside Addresses And Translate Into One External IP Address?

Dec 8, 2011

I know the CSS is too old but I have one in production environment and I was asked if it is possible to CSS to make NAT from inside addresses and translate them into one external IP address to diferent kind of communications, for example: and (inside addresses) should start connection to external IP addresses destinations / / and so on, the default gateway to those Servers is the CSS and I would like to know if it is possible that all connection to external world to be translate into one IP address
My CSS is 11503
Version: sg0810106

View 2 Replies View Related

Linksys Wireless Router :: EA4500 - Translate Ipv4 Address And Port To Ipv6?

Nov 9, 2012

I have a virtual machine running in my desktop which connected on the gigabit lan port on EA4500 with firmware 2.0.37.What I want to be able to do forward a port that came from an external ipv4 address to the ipv6 address and a different port to my virtual machine (to remote desktop port 3389).The reason I want to convert the traffic to ipv6 is because virtual machine is running vpn and is not reacheable through ipv4 (unless bunch of routes are setup and things get complicated etc). I verified my phsical server and virtual server get both ipv6 ip addresses through ipv6 tunnel from comcast. Without tunneling I could not get ipv6 setup using automatic mode with comcast, it simply did not work for some reason.

View 1 Replies View Related

Cisco Firewall :: ASA 8.3 Static Nat And ACL

May 6, 2011

Based on the network object below, I am looking for confirmation that It is good practice to use this natted object in my ACL applied incoming to the inside interface rather than have another object specifically for the object My_PC. I have tested and it does work, however this is my preffered option rather than having to create 2 objects, for the host and also the natted host.ASA(config)# object network My_PCASA(config-network-object)# host nat (inside,outside) static

View 5 Replies View Related

Cisco Firewall :: Asa 8.4.2 How To Do Static One To One Nat

Sep 1, 2011

The order in the older ios was nat 0 then static. With the new ios how is the static nat treated if i have a nat (inside,outside) source static Now I need to do some static one to one nats for some servers in the same subnet as the no nat

View 2 Replies View Related

Cisco Firewall :: Static NAT On ASA 8.3

Oct 26, 2011

I am trying to configure static nat on ASA 8.3 but its not working.
here is the configuration:
object network Unix-Server
description Unix server
object network Unix-Server
nat (Inside,Outside) static
its basic configuration where i have my server on the inside network ( which i want it to be natted to public ip to ( .
i tried to add an access-list ingress direction  on the outside interface to permit traffic from any to the public ip but still its not working.

View 4 Replies View Related

Cisco Firewall :: Using Static Policy NAT On ASA 8.2?

Jul 6, 2011

i am doind a policy NAT on the folowing scenarion. 
acess-list policy_nat extended permit ip host host
static (inside,outempresa)  access-list policy_nat
I understand that when host A wants to connect to host B192.168.1.1 its going to be translated to when host wants to connect to10.0.0.1  the same entry will change the destination when the packet hits the asa from  to, is that correct ?

View 2 Replies View Related

Cisco Firewall :: ASA 5505 Static NAT

May 26, 2011

I just replaced a PIX 501 with a new ASA5505. I had a very weird problem and would like to know what caused it incase I run into it again. The setup is a DSL connection, with an old-ish speedstream DSL modem. Static IP, no PPPoE. I had a PIX 501, then two servers with static NAT entries on secondary WAN IPs. Everything was working fine on the PIX, I just duplicated the config over to the ASA. I swapped out the PIX for the ASA, and rebooted the DSL modem to clear out it's cache. After installation, NAT was working fine for the the global pool, but the systems with static NAT could not get online. I tried lots of different things to fix them, and they never worked. Finally I rememberd running into an issue like this a long time ago, in that the static NAT IP's wouldn't work without giving them a bump-start on the network. So I assigned the ASA each of my WAN IPs, one at a time, and tested them all. After that I went back to the original WAN IP, configured the static NATs, and they fired right up. why did my static NAT entries not work until I first assigned them to the ASA, then swapped back? I did reset the DSL modem when I swapped the firewalls, so I don't believe it was an ARP issue (unless it was an ARP issue at the far end?) I would like to know if there is something I can do differently with the devices or with the config to not have this issue again in the future.

View 5 Replies View Related

Cisco Firewall :: PIX 515 - How To Assign Static IP

May 20, 2012

I've been given 4 more public static ip's and would like to use one of them static ip's to point to my sharepoint box, for example i want to be able to access my sharepoint boxweb site externally: - my public pix ip - is my owa for email ( - my sharepoint box ( - not assigned
What command do I have to input on the Cisco Pix 515 to make that work?

View 1 Replies View Related

Cisco Firewall :: Global PAT With Static NAT On PIX 6.3

Jun 7, 2012

I am having issues getting this to work.  For email, I have DNS'd to  I want it to come in to  It needs to go out a cluster of,, or but look like it came from the address.  I have set up static NAT for the inbound.  I have set up the global PAT with an ACL group of the addresses.  I have set this same method up on an ASA with no issues but it doesn't want to work on the PIX 6.3.  What am I missing?
no fixup protocol smtp 25
object-group service NewExchange tcp
  port-object eq https
  port-object eq smtp
 [Code] ....

View 1 Replies View Related

Cisco Firewall :: Static NAT At ASA 5520?

Aug 9, 2011

I have Static NAT on ASA 5520 for mail server and proxy server. I can use it from internet. now i want to Static NAT for I mean>,> so on.

I want when hit it goes to
just simple static  NAT. which command i need at ASA ? what is GW of pc  ?

View 2 Replies View Related

Cisco Firewall :: Static NAT And Access From Outside In ASA 8.4

Aug 24, 2011

I have configured Static NAT on ASA 8.4; and opened the telnet access through following configuration but it is not working. What mistake I am making in my configuration
interface Ethernet0/0nameif outsidesecurity-level 0ip address!interface Ethernet0/1nameif insidesecurity-level 100ip address
hostname(config)# object network Router_A
hostname(config-network-object)# host
hostname(config-network-object)# nat (inside,outside) static
hostname(config)# access-list ACCESS-TO-SERVER extended permit tcp any host eq telnet
hostname(confi)# access-group ACCESS-TO-SERVER in interface outside
The host (router) can access internet after this configuration but telnet is not possible from outside.

View 2 Replies View Related

Cisco Firewall :: ASA 8.3 NAT With PAT Static NAT And VPN Exclusion

Sep 19, 2011

We have a Cisco ASA 8.3 and we're trying to configure NAT with multiple types of NAT.
We have a static NAT to an inside host from
Internet Interface is on
Users get NAT (PAT) on
VPN Subnet "No NAT" exclusion is from our LAN to various other locations.
Here are the relevent extracts from our configuration:
object network Server
nat (inside,outside) static 
object network Inside_LAN

When the VPN exlusion ACL is applied to the configuration, PAT users have no connectivity to the Internet via TCP though UDP and ICMP traffic still passes. The VPN is operational. With the VPN NAT configuration removed, as expected the VPN fails, but users have connectivity to the Internet.

View 12 Replies View Related

Cisco Firewall :: Static Nat On ASA5510

Aug 25, 2012

We have network topology:

Inside Network ( --- ASA5510----- Outside network (
ASA5510 have: Inside interface:; outside interface:
And we config:
# object network obj_inside
# subnet
# nat (inside,outside) dynamic interface
So, we í in from outside, we can't access web at

View 3 Replies View Related

Firewall / Proxy For Static IP?

Jul 5, 2011

I have a server having windows server2003 os. I have configured my web application on this server which is accessible over internet using static ip. But I found that there is an risk of viruses on my server. Thats why now I want to configure this server behind the firewall/Proxy as well as dont want to share my static IP.Is there any way to keep server protected using firewall / Proxy application which is free. And also tell me how to nat the static ip.

View 4 Replies View Related

Cisco Firewall :: ASA 5505 - Static NAT And ACLs

May 25, 2011

Currently a customer has all theLAN devices using a router as the Default Gateway. The router also do the Dynamic NAT to the internet access and has NAT/PAT rules to publish some services like HTTP and FTP. As I know the router will permit all the incoming traffic in all its interfaces without restrictions at less there is an ACLs that restrict the incoming traffic on an specific interface.Now the customer has bought a brand new ASA and wants to use it as the default gateway for the entiery LAN. This means, the ASA will have the internet connection and will be the responsible for the NAT/PAT process.

I have configured the NAT/PAT rules already following the current router configuration, but I need to know if I have to configure ACLs allowing the incoming traffic on th Outside interface for the services I NATed.

View 1 Replies View Related

Cisco Firewall :: ASA 5505 - Static Nat And VPN Conflict

Jan 12, 2012

I have a Cisco ASA5505 running 8.2(1) and I am using ASDM to manage the firewall. I have a Linux VPN server on the inside with and IP address of YYY.YYY.YYY.39 with a static NAT to the outside with an address of XXX.XXX.XXX.171 . I have a site to site VPN tunnel which terminates on the outside of the ASA on the outside interface XXX.XXX.XXX.190 .Traffic from the YYY.YYY.YYY.0/24 network can't transverse the site to site VPN as there is a conflict of IP address's on the far side so it is natted via a dynamic policy to host address ZZZ.ZZZ.ZZZ.100, Users remote into the inside(YYY.YYY.YYY.0/24) for support via the Linux VPN server (.39) and then need to communicate down the site to site VPN. The problem is that the static NAT for the incomming connections takes preference and bypasses the site to site VPN tunnel for outbound traffic. I tried to create a policy Static nat but it tries to modify the static nat that handels the incomming traffic to the Linux server.

View 2 Replies View Related

Cisco Firewall :: Static 1 To 1 NAT Not Working On ASA 5505

Jan 28, 2013

i have 2 internal server sitting in inside interface
inside network vlan 1 ip address, and
i going to map to public ip routable address and to public ip routable address
the purpose is to make those 2 server, and .22 to be able to access remotely using public routable ip address,
however, after done the configuration i still not able to ping or access the public IP Address mention above. my both server are turn on and can access internally.both server are also able to access internet. See below partial configuration retrieve from Show Run.
global (outside) 1 interface
nat (inside) 1
nat (Antlab) 1


View 2 Replies View Related

Cisco Firewall :: Dynamic PAT And Static NAT ASA 5515

Mar 23, 2013

Recently we migrated our network to ASA 5515, since we had configured nat pool overload on our existing router the users are able to translated their ip's outside. Right now my issue was when I use the existing NAT configured to our router into firewall, it seems that the translation was not successful actually I used Dynamic NAT. When I use the Dynamic PAT(Hide) all users are able to translated to the said public IP's. I know that PAT is Port address translation but when I use static nat for specific server. The Static NAT was not able to translated. Any conflict whit PAT to Static NAT?

View 3 Replies View Related

Cisco Firewall :: ASA 8.4 NAT Static And Dynamic With Same Public IP

Nov 8, 2011

in ASA 8.4, I need to use to static nat an internal IP with a public IP and use the same public IP to dynamic nat another internal IP:
-nat (inside,outside) source static IP1_PRIVATE IP_PUBLIC
-nat (inside,outside) source dynamic IP2_PRIVATE IP_PUBLIC
All outgoing connection from IP1_PRIVATE and IP2_PRIVATE should be natted to IP_PUBLIC and all incoming connection to IP_PUBLIC should be forwarded to IP1_PRIVATE: is it correct ?

View 3 Replies View Related

Cisco Firewall :: Static NAT SYN Timeout - ASA 5505

Aug 30, 2011

I have a 5505 for a small business that has one web server.  The web server has a static NAT entry to an IP address and not an interface.  There is an access rule allowing any HTTP traffic to the outside IP of the web server.  From the web server I can't access the Internet.
All other computers on the network can access the Internet using a dynamic nat rule that uses the outside interface. The web server is accessible from a computer behind the firewall.
If I delete the static NAT entry for the web server I can get on the Internet.
I have turned debugging on and see that an outbound connection is built and then 30 seconds later the connection is torn down with the bytes 0 SYN Timeout message.
I am running 8.0(5).

View 3 Replies View Related

Copyrights 2005-15, All rights reserved