[AusNOG] Cisco ASA question

Alex Samad - Yieldbroker Alex.Samad at yieldbroker.com
Thu Apr 3 14:25:46 EST 2014


Hi

I have a Cisco ASA question for the list.

I have a 5520 (cluster)

int Internet 
int internal

on the internet I have my dGW to the internet, I also have my own class c, lets say 1.2.3.0/24

I have a few object nat's defined for 1.2.3.x/24

I am going to start moving the NAT function away from the ASA.

I have a router inside my network with 1.2.3.129/32 on a look back interface and its advertised internally via OSPF. It can be seen on the ASA

>From my reading I believe I can get the ASA to forward and not nat for .129 if I use Identity NAT

But I can't find any examples for mixed Object NAT and identity NAT
And I am not sure the identity NAT will respond to ARP on the internet interface 
And I presume I have to add the right permit.

I asked at the cisco forums, but the only person to respond said I couldn't do the /32 trick ...

So I am come to the list 

Thanks in advance

Alex


More information about the AusNOG mailing list