1
vote
0answers
26 views

Route two public (ISP assigned) subnets on 'outside' interface of Cisco ASA 5510

We've got a Cisco ASA 5510 that sits on our edge and acts as the PPPoE endpoint for a fibre connection. The fibre connection came with a static IP, which is assigned via PPPoE, and gets picked up by ...
0
votes
0answers
23 views

Cisco ASA 8.2, accessing an internal webserver with an external IP-address together with port translation

We have one web server, let's call it SERVER01. It is running two different web servers that both uses HTTPS, INTERNALAPP on port 443 and EXTERNALAPP on port 444. In a previous setup we had an old ...
0
votes
0answers
18 views

Cisco ASA Access anyconnect from inside IPsec tunnel

I have a Cisco ASA on a dynamic WAN IP with a IPsec site-to-site tunnel to a remote linux host in a datacenter with a static WAN IP. All non local traffic is tunneled and the datacenter end is the ...
0
votes
0answers
32 views

Cisco ASA 5505: PAT / NAT between 2 IPSec Tunnels

I've the following Setup: Customer <-> HQ <-> Branchoffice The Customer has a 192.168.1.0/24 subnet. On the HQ only the VPN Gateway is in my context, 172.20.10.1 . And on the Branchoffice ...
0
votes
1answer
33 views

How to avoid hairpin VPN on cisco

I currently have a hairpin VPN setup with a Cisco ASA, but I'm not very happy as it messes up service access that are on ASA external IP address and are NAT'ed inwards :( How should I re-design the ...
0
votes
1answer
2k views

Cisco ASA 5505 - NAT or Port Forward for SIP / VoIP ver 8.4

I just had an NEC PBX installed that lets me use SIP trunks for VoIP services, My gateway is a Cisco ASA 5505 running 8.4 and I only have one public/static IP Addresses. So far, my trunks are ...
-1
votes
1answer
57 views

Cisco ASA 5505: Created a faulty NAT rule. Can't reach the ASA

I was trying to create a NAT rule to reach my internal web server from inside the LAN. Something must have gone wrong. Now when i try to reach the ASA through https://192.168.1.1 the response is from ...
2
votes
0answers
119 views

Keepalived failover not working for Static NAT target behind Cisco ASA

I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm ...
0
votes
0answers
48 views

Cisco ASA ASDM Missing Nat options when creating network object

Hello all hope this is a simple fix. In ASDM of one of our ASA's, when we go to create network object. the NAT options to create automatic NAT rule is completely missing. its just a small box to ...
2
votes
1answer
336 views

Dual ISP Inbound NAT — Asymmetric routing

routing question here. In a dual ISP scenario is there way to use both external IPs and nat them to a web server in a higher security level? The issue I am running into is on the return path for ...
0
votes
2answers
224 views

Cisco ASA/PIX Can't Access Internal Resources Behind NAT [duplicate]

My servers are natted 1:1 as follows, i.i.i.i maps to x.x.x.x where i is an internal IP, and x is the external IP. From an i.i.i.i machine, I cannot access x.x.x.x resources... What special ...
0
votes
0answers
144 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
1answer
305 views

How to NAT behind public IP on pFsense before IPSEC to Cisco ASA?

I have two networks: Local 192.168.1.0/24 and Remote 10.8.8.8/24. On the local network I have installed pFsense as gateway. On the remote network there is a Cisco ASA that I don't have control over. ...
0
votes
2answers
679 views

Cisco ASA-5505 Port Forwarding

I have a Cisco ASA-5505 firewall, which is currently configured to share our internet connection and do NAT for my LAN, as well as forward port 443 to an internal machine. I need to forward port 2222 ...
1
vote
1answer
674 views

ASA 5510 8.4 Nat & Portforwarding

So I'm trying to forward an internal service on a internal server to the external interface on the same port on the outside interface of our ASA. I been searching for a solution for days and found ...
1
vote
1answer
418 views

How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?

I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites. Existing: [10.1.0.2...] = source client | [10.1.0.1 ASA ...
6
votes
1answer
261 views

How do I configure NAT rules when using ASA IP-SLA when leveraging post-ASA-8.3 NAT syntax?

We are currently running ASA9 at a location with redundant ip connectivity. We'd love to configure ip sla so that internet access survives a single carrier outage. I'm aware of the ip sla commands, ...
0
votes
2answers
242 views

IP and Port Forwarding on ASA 5505

I have an ASA 5505 with outside network of public ips 95.123.234.64/26 and inside network of private ips 10.22.33.0/24. I would like to redirect any tcp traffic that hits 95.123.234.67:80 to a public ...
0
votes
1answer
411 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...
1
vote
1answer
1k views

Cisco ASA 5520 Unable to access external IP on Internal Network

I have an internal network of 192.168.0.x and I have a server nat'd to an external IP address we have. I can't figure out how I need to change my configuration for this thing to get it to work. I'm ...
0
votes
2answers
233 views

ASA 5505 outside access for clients with dynamically assigned IPs, no outside access for clients with static IPs

We have an ASA configured to access the internet, which works fine for clients who have an IP address assigned by DHCP, but not for clients with manually assigned IPs. For instance, with the DHCP ...
1
vote
1answer
357 views

Cisco ASA Redirect all traffic from specific outside hosts to specific inside host

I've got a new PBX that I've setup and i will be using a 3rd party sip provider, they've gone ahead and given me an outside number an now i need to allow traffic from 3 different hosts to be able to ...
1
vote
3answers
1k views

Trying to setup NAT from 2 outside IPs to the same private IP

Cisco ASA 5510 I currently have a NAT for SMTP on one outside IP to an internal IP. I need to setup 2 external IPs to NAT to the same IP internally. How can I do that? ex: 10.10.10.1 25 --> ...
0
votes
1answer
540 views

Cisco ASA 5505 - InterVLAN NAT Exemptions Implementation not working

Short version is we cannot communicate between our subnets. We have a Cisco ASA 5505 we are using for our network router. We have a Netgear L2 switch behind that with 10 vlans. Each VLAN is on its ...
0
votes
1answer
299 views

Cisco ASA 8.2 ACL For NAT

Sadly I have gone back in time to ASA 8.2(5)33 which I am not so familiar with. I have configured NAT between two interfaces but traffic isn't passing becasue I can't get the ACL to work; (The full ...
0
votes
3answers
740 views

Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name

I am using Cisco ASDM for ASA I have my internal network called soa. My outside interface is called outside. Let's say my outside IP given to me by my ISP isp is y.y.y.y I have a web server inside ...
0
votes
1answer
878 views

Cisco ASA 5540_outside to inside traffic NAT

This is for a test lab setup: landing server(192.168.49.26)---(.49.25/29)Cisco6500(.49.1/29)---(49.2)Cisco ASA(x.x.55.81)---External The C6500 is the core of the test lab to which the "landing ...
3
votes
1answer
199 views

Can I enable NAT on a Cisco ASA without breaking connectivity?

Sorry for the noob question, I haven't done this in years... I have a Cisco ASA with a working VPN, which I set up like five years ago, and I would like to forward http through to an internal IP ...
1
vote
1answer
99 views

Allow one external client to use a NAT through ASA5510 Security Plus

I keep struggling with Cisco ASA. How I can make a certain NAT (RDP, SSL or whatever) and secure it by allowing just one external client with fixed internet IP to make use of this NAT?
1
vote
3answers
1k views

Unable to access VPN from inside network (Cisco ASA)

I'm using an ASA 5510 for a large network containing multiple subnets, some of which (wireless) have limited network access. I'd like to allow the wireless users to be able to VPN in for full network ...
1
vote
1answer
97 views

ASA permit only one host to *.xyz.com

I want to allow a host to download some updates from *.xyz.com (in internet). How should I permit only this host from my inside network to access *.xyz.com on ASA, access can be via http? At moment ...
3
votes
2answers
914 views

Initial Cisco ASA 5510 Config

I'm trying to set up a new ASA 5510. I have a pretty simple set up with one /24 on the inside NATed to a DHCP address on the outside. Everything on the inside works and I can ping the outside ...
1
vote
2answers
5k views

NAT one public IP to two inside servers on ASA 8.4

for example I want to: NAT 5.5.5.5 tcp 85 to 192.168.1.5 tcp 85 NAT 5.5.5.5 tcp 33 to 192.168.1.9 tcp 33 NAT 6.6.6.6 tcp 80 443 to 192.168.1.20 tcp 80 443 The way I was going to do this was: ...
2
votes
1answer
1k views

ASA Static NAT Understanding

I have an ASA configured as follows; Inside: 192.168.0.254/24 Outside: 10.0.0.1/29 (This is routed to the ASA) global (outside) 1 interface global (outside) 2 10.0.0.2 nat (inside) 1 0.0.0.0 0.0.0.0 ...
1
vote
1answer
1k views

Cisco ASA ssh portforwarding with custom port

Cisco ASA 8.4(1) ADSM 6.4 I'm struggling with forwarding SSH connections from the outside into a server inside my network on a non standard port. What would the command line look like if I wanted ...
3
votes
1answer
521 views

Traffic blocked between VLANs despite security-level difference on ASA 5510

I have an Cisco ASA 5510 configured thus: interface Ethernet0/0 description ### Trunk for inside, wlan ### speed 1000 no nameif no security-level no ip address interface Ethernet0/0.10 ...
2
votes
1answer
4k views

Cisco ASA 8.4 port forwarding

I am having trouble port-forwarding on an Cisco ASA from a host on the internet to a host on the internal network. The outside interface of the ASA is assigned via DHCP. Is there something else that ...
2
votes
3answers
205 views

ASA: How to connect server with a external IP address already assigned?

Any ideas how this can be done on a ASA? There was a sonicwall in place but it just died and we do not have a replacement besides this ASA. The 24.172.x.132 is a spam filter and I can't change the ...
1
vote
0answers
114 views

NAT confusion regarding cisco ASA5510

I'm setting up my first cisco firewalls. A little information first:I have two asa5510 setup in a working active/standby pair. From my ISP i have two public subnets. A /29 and a /26. On my DMZ ...
1
vote
1answer
3k views

Is this the correct config for a Remote Access VPN for ASA 8.4?

First time configureing remote access VPN for 8.3 / 8.4 so the NAT and VPN commands are a bit diffrent for me. Below is the VPN config and the coresponding NAT to NO NAT the IP space. If someone ...
0
votes
2answers
1k views

Cisco ASA - Configure External Access to a Server

I'm trying to configure my ASA (ASA 8.4(2), ASDM 6.4(5) ) to allow external access to a server (using RDP). I've tried everything, but it doesn't seem to be working. I'm sure it is something simple ...
1
vote
2answers
8k views

“NAT reverse path failure” ASA 8.3

Forgive me, as I'm not very experienced with ASAs, but I believe what I have configured should be working. I have an ASA 5510 running version 8.3(2), which is connected to internal, external, and dmz ...
0
votes
2answers
739 views

asa 5510: nat and static policy, different interfaces

We have a ASA 5510 with four networks: inside, outside, dmz, WLAN. All addresses inside have nat to outside and dmz and WLAN. There exists one static policy from inside to outside for our imap-server. ...
0
votes
2answers
1k views

Can't ping gateway once VPN established

I have two servers: Checkpoint Safe@Office 500 with ip x.x.x.x and local network a.a.a.a/24 Cisco ASA5505 with ip y.y.y.y and local network b.b.b.b/28 Before setting up a vpn I was able to ping ...
6
votes
2answers
2k views

DMZ subnet: to NAT or not to NAT?

I'm looking at setting up a DMZ behind a Cisco ASA that will contain a large number of HTTP front-end load balancers and SSL offload services - over 100 IPs, concentrated on a smaller number of hosts. ...
0
votes
1answer
445 views

How to NAT a 192.168.x.x corporate domain on a Cisco ASA to not conlict with VPN remote users LANs

I'd successfully configured an IPSEC VPN as per this question:- How to disable dns doctoring for IPSEC VPN connections for ASA 5510 However I ran into the problem that remote users are often on a ...
2
votes
3answers
3k views

Cisco ASA 5505 DMZ Setup Issue

I have an ASA 5505 running v8.4. I have one static IP that my ISP gives me and I need to use that for my INSIDE network as well as my DMZ. This becomes a PAT issue as I need some ports to terminate ...
1
vote
2answers
690 views

How to disable dns doctoring for IPSEC VPN connections for ASA 5510

*Update, turns out that adding additional nat exclusions stopped dns doctoring from being triggered, resolving the problem. So I have one last outstanding issue with our vpn setup to our office. I ...
1
vote
1answer
161 views

Can not access internal network services through external IPs

We have multiple servers running on our network using a ASA 5510 as the firewall and router. NAT is used to give the servers their external IPs. When a request made externally using the external IP ...
2
votes
1answer
1k views

Cisco ASA Nat 8.4

I'm trying to get port forwarding on my ASA working. I'm using: object network server1 nat (inside,outside) static interface service tcp 25 25 and an access list, and it works fine, however, I ...