I have an ASA configured as follows;
Inside: 192.168.0.254/24 Outside: 10.0.0.1/29 (This is routed to the ASA)
global (outside) 1 interface global (outside) 2 10.0.0.2 nat (inside) 1 0.0.0.0 0.0.0.0 nat (inside) 2 192.168.0.50 255.255.255.255 static (inside,outside) 10.0.0.2 192.168.0.5 netmask 255.255.255.255
As you can see, there is a default NAT rule to NAT clients to the external IP on their way out. There is also a specific rule to map internal host 192.168.0.50/32 to 10.0.0.2, a different external IP. Finally there is a static mapping for 10.0.0.2 at the end.
I am trying to enter the following static NAT rule to port forward on the external IP 10.0.0.1 to internal host 192.168.0.5;
# static (inside,outside) tcp interface 555 192.168.0.5 555 netmask 255.255.255.255 ERROR: duplicate of existing static inside:192.168.0.5 to outside:10.0.0.2 netmask 255.255.255.255
I don't understand what's going on here. Can someone explain please?