Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: Sending specific machines on my network out a separate IP

Sending specific machines on my network out a separate IP 6 years 4 months ago #35104

  • mejor
  • mejor's Avatar
  • Offline
  • New Member
  • Posts: 4
  • Karma: 0
So i figured out how to do this with one machine like a mail server doing a static inside outside. However how can I do it for a group of machines to go out the same IP? Let me know. Thank you!
The administrator has disabled public write access.

Re: Sending specific machines on my network out a separate I 6 years 4 months ago #35105

  • mejor
  • mejor's Avatar
  • Offline
  • New Member
  • Posts: 4
  • Karma: 0
So i figured out how to do this with one machine like a mail server doing a static inside outside. However how can I do it for a group of machines to go out the same IP? Let me know. Thank you!

I am running a Cisco ASA 5520
The administrator has disabled public write access.

Re: Sending specific machines on my network out a separate IP 6 years 4 months ago #35120

  • S0lo
  • S0lo's Avatar
  • Offline
  • Moderator
  • Posts: 1577
  • Thank you received: 7
  • Karma: 3
I'm really not sure I understand your question. Are you trying to make a static NAT for a server or couple of servers, such that outside hosts can reach each one of the servers using a separate outside IP?
Studying CCNP...

Ammar Muqaddas
Forum Moderator
www.firewall.cx
The administrator has disabled public write access.

Re: Sending specific machines on my network out a separate IP 6 years 4 months ago #35123

  • mejor
  • mejor's Avatar
  • Offline
  • New Member
  • Posts: 4
  • Karma: 0
I'm really not sure I understand your question. Are you trying to make a static NAT for a server or couple of servers, such that outside hosts can reach each one of the servers using a separate outside IP?

Sorta. I am trying have 10 machines report out on a single WAN IP that is different than the ASA's WAN IP. I was using the static NAT as an example.
The administrator has disabled public write access.

Re: Sending specific machines on my network out a separate IP 6 years 4 months ago #35138

  • S0lo
  • S0lo's Avatar
  • Offline
  • Moderator
  • Posts: 1577
  • Thank you received: 7
  • Karma: 3
Assuming you want them to work as client PCs (not servers), try

[code:1]nat (inside) 2 192.168.1.0 255.255.255.0
global (outside) 2 44.33.22.11 netmask 255.255.255.255
[/code:1]

Replace 192.168.1.0 255.255.255.0 above with your own inside IP range for the ten PCs. And replace 44.33.22.11 with your WAN IP (other that the ASA's WAN IP).

Note here that if you already have other NAT/global statements in your config they might override the above if their NAT IP range where more specific than the above. The ASA always chooses the the most specific NAT statements first for regular NAT.

Hope this helps
Studying CCNP...

Ammar Muqaddas
Forum Moderator
www.firewall.cx
The administrator has disabled public write access.
Time to create page: 0.081 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup