NAT issues with 5510

Hi,

New to Cisco, hope you can help with ASA 5510.

Device is working and has a dynamic NAT rule that says everything on the inside network (10.0.0.0/24) NAT's to the outside interface IP(192.168.0.1). Which is required for certain apps to work correctly. That works.

When I add Static NAT that maps outside address to internal webserver. 192.168.0.5 --> 10.0.0.5 I can access the internal webserver no problem.

The problem is now all outbound traffic from 10.0.0.5 no longer uses 192.168.0.1 as its public address, but rather 192.168.0.5.

How can I have inside servers NAT to outside interface AND have these mappings to my public servers??

Thanks!

This is becuase your static rule is for all services, if you want your webserver to use 192.168.0.1 for the rest then you have to modify the static rule for a certain port (www) only.

For example: static (inside,outside) tcp 192.168.0.5 http 10.0.0.5 http netmask 255.255.255.255
You also might want to limit tcp connections on this static rule.


Scrapper.

I will give that a try. Thank you for the help.