Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

Cisco ASA firewall original address and destination address NAT

2025-03-28 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)06/01 Report--

1. Network topology information

2. Basic configuration of network address

Outside Router:

Interface FastEthernet0/0ip address 11.1.1.1 255.255.255.0

Inside router

Interface FastEthernet0/0ip address 10.1.1.1 255.255.255.0ip route 1.1.1.0 255.255.255.0 10.1.1.10ASA firewall interface Ethernet0/0nameif outsidesecurity-level 0ip address 11.1.1.10 255.255.255.0! interface Ethernet0/1nameif insidesecurity-level 100ip address 10.1.10 255.255.255.0 route outside 1.1.1.0255.255.255.0 11.1.1.1 1route inside 2.2. 2.0 255.255.255.0 10.1.1.1 1

3. Demand and configuration

Need 1:

Map the IP address 2.2.2.2 of the internal network server to the external network IP address 11.1.1.2, and do ACL to release its external access rights. Static (inside,outside) tcp 11.1.1.2 www 2.2.2.2 8080 netmask 255.255.255.255access-list oti extended permit ip any host 11.1.1.2 access-group oti in interface outside

Demand 2:

When an internal user accesses their internal IP address 10.1.1.3, the destination address is translated to 1.1.1.3

Static (outside,inside) 10.1.1.3 1.1.1.3 netmask 255.255.255.255 requirement 3:

The original destination address is translated at the same time. When the internal user's IP address 2.2.2.4 accesses its destination address 10.1.1.4, the original address is converted from 2.2.2.4 to 11.1.1.4 Destination address 10.1.1.4 translated to 1.1.1.4static (inside,outside) 11.1.1.4 2.2.4 netmask 255.255.255.255 static (outside,inside) 10.1.1.4 1.1.1.4 netmask 255.255.255.255

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report