Question/routing one subinterface to another NAT

I have a client that is located behind an ASA on Int g0/1.143 (sec-level 100).

I have another client that is behind the same firewall on Int g0/1,156 (level s = 100 as well).

The default gateway for each client is the ip address on the above interfaces, 192.168.143.254 and 192.168.156.254 respectively.

The customer on 1,156 has a web server that is in place and alive on the internet, to a public address of 72.46.x.x natted.

Customers on 192.168.143.0/24 can not get on the site.  When I tracert 192.168.143.10 I can see the router located on the external interface of the ASA, it fails, then it is sent to the default gateway of the SAA.

What I'm missing here?

Thanks as always...

Hello

When we meet this problem the solution the most common was to the real DNS LAN Server configuration change.

I guess that option is also to make a static NAT between the 2 LAN interfaces. In other words the Web server address LAN to the public IP address to the other LAN NAT. In this case, you will need to take into account that all traffic between the local network establishing the connection should use the new public IP static NAT address. It might therefore affect some LAN - to - LAN traffic (no VPN without actually LAN to LAN through the same ASA)

Example, the command would be (with made up names and IPs)

Static NAT for outdoor

static (lan1, outside) 1.2.3.4 10.10.10.10 netmask 255.255.255.255 dns

Static NAT between local networks

static (lan1, lan2) 1.2.3.4 10.10.10.10 netmask 255.255.255.255

I'm not a static NAT to policy would be even better. To my knowledge he would be as follows

Server WEB-POLICY-NAT permit tcp host 10.10.10.10 access list www 10.10.20.0 255.255.255.0

static (lan1, lan2) 1.2.3.4 access-list Web SERVER POLICY NAT

Where:

  • 10.10.20.0/24 is the other LAN

I guess it should work also, BUT I can't say for sure as I just writing this out of my head. The above static NAT to policy should not apply for web/http traffic to the Web server, other traffic would use the real IP address of the server when connecting to the other LAN.

I can't test it right now with a real ASA so I can't confirm if the above configuration is possible, or if it would work. The first option, I mentioned should work, but as I said it could cause problems between local networks if the Web server has some other services in order to reach the other LAN.

-Jouni

Tags: Cisco Security

Similar Questions

  • Copy data from one schema to another. Reopen the Question

    Hello

    I had asked this question earlier to copy data from tables of one schema to another in the same database using the database link. In my previous post have mentioned below.
    Re: copy data from one schema to another.
    Now I am faced with the question for the remote copy of database

    I have created a DB connection between my local system and the remote database. with the chain of connection as shown below
    CREATE THE DATABASE PUBLIC LINK "MERU_DEV_LOCAL_DEV".
    CONNECT TO MERUDEV IDENTIFIED BY MERUDEV WITH THE HELP OF "MERUPROD";
    In the above script
    LOCAL DEVELOPMENT scheme IS
    REMOTE schema is MERUDEV
    I try to copy remote database to my local database tables using the script below.
    network_link DEVELOPMENT impdp = schema MERU_DEV_LOCAL_DEV = MERUDEV remap_schema = MERUDEV:DEVELOPMENT TABLE_EXISTS_ACTION = REPLACE
    But the copy of the table does not occur. What could be the problem? Please suggest me or do I need to modify the script

    Thank you
    Sudhir

    You can:
    -monitor the BONE with ps - ef
    -monitor data pump: jobs are dba_datapump_jobs and dba_datapump_sessions
    -monitor with logops: v$ session_longops

  • How to copy and paste text from the page of the book one photo to another.

    Hello, I downloaded this software 2 days ago, and I had so much fun with it. pls I need help on how to copy and paste text from the page of the book one photo to another. Second, how to copy my photo book completed pages project to another laptop computer for printing. Thank you

    Wow! I solved the first problem, I clicked on 'ctrl c' to copy and "ctrl v" to paste. yipppppeee! now am loving this software d most just need help with the second question now

  • What are the parameters? How are Variables differenet? Why we can not use variables to pass data to one sequnece to another? What is the advantage to use parameters instead of Variables?

    Hi all

    I am new to TestStand. Still in the learning process.

    What are the parameters? How are Variables differenet? Why we can not use variables to pass data to one sequnece to another? What is the advantage to use parameters instead of Variables?

    Thanks in advance,

    LaVIEWan

    I'm sorry... I discovered that... its not at all possible to pass data to another sequence using variables... it must be through settings... once again I apologize for the display of such a stupid question

  • I have several jobs calendar, I want to trigger one completion of another should begin. Someone help on this.

    In my windows 2003 server, I have more than one schedule jobs, I want to trigger one completion of another should begin.

    Job will import and export data from applications.

    Someone help on this.
    Kind regards
    Ahamed.R

    Hello

    Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for Windows Server on TechNet. Please post your question in the Windows Server forums.

    You can use the link for your question: http://social.technet.microsoft.com/Forums/en/category/windowsserver/

  • Move the HD from one office to another desktop computer

    It is a question about moving the files & applications from one desktop to another. I try to get 1 year of use of existing & software equipment.

    I have an office of stand-alone Dell old 12 years with Windows XP that I use every day at home. I have an old Dell Office of 7 years with XP & no apps or files that I have gained from the work that I do not use.

    I guess the older machine is sick because I have to reset the clock each time I boot Windows. It seems to work otherwise. I want to act before the death of the sick machine.

    A method that I am considering moves chips drive & memory fixed older machine to the latest machine. These two components are less than 3 years. I replaced a fixed disk damaged & added some memory.

    The other method I see is to copy the contents of the fixed disk on the sick machine on the newer machine fixed drive, leaving the components in place.

    I know I need to buy new hardware and new software. I would wait 10 Windows.

    I'd like suggestions on the simple, reliable and cost-effective method to buy more time by using existing hardware.
    Pat_Hof

    To move the data from the user, just install the xp installation cd, search for "other tasks" in the

    menu, search for "File Transfer Wizard", set the pc as old pc, select the file to save, save files

    in a new folder that you created, once its through, out of xp cd. Move the new folder to a cd

    Once through, on the new pc, install the xp installation cd, locate the file transfer, set the new pc, select

    to search for files, installation cd with user data, find the folder on cd, install FTW

    It automatically... Best bet is to run FTW on a new user account, and then move the files to the other as

    necessary. It's one way, others, install the HD from old pc to new, HD set as slave,

    with the HD as a slave, the data can be used with the operating system.

    Windows 10 is already available.

  • Permissions do not update every time that a user moves a file from one folder to another in the Windows XP computer.

    Original title: folder permissions to move or copy.

    I have a problem that I'm sure has a simple explanation but I don't know.  I have a folder in the tree that whenever a user moves a file from one folder to another, the permissions do not update.  Yet if a user copies the folder to the same location, permissions to update as expected.  This only happens with XP.  If I try with Win 7, if the user moves or copies, update permissions.

    Has anyone seen this or have an explanation?

    Hello

    Your Windows XP question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the forum TechNet for assistance:

    http://social.technet.Microsoft.com/forums/en/itproxpsp/threads

    Hope the helps of information.

  • Need help with the error message when you try to transfer a file from one laptop to another.

    I'm trying to transfer a file from one laptop to another using Belkin transfer cable. While trying to install software for my old laptop, I get an error message as follows WET7CABLE ERROR OPEN. LOG FILE. I tried with the support of Belkin and they referred me to Microsoft. Please help me with this question.
    Thank you
    Nelson Santiago

    Hello

    It is a matter of easy transfer Windows.
    Read on this and the solution here:

    http://support.Microsoft.com/kb/980870

    Kind regards

    Joel

  • Computer scientists moved us from one server to another. The change of server name has left me with an orphan sync partnership.

    Our it staff moved us from one server to another.  Although I did a sync with all my spotted "available offline" files before the move, the change of server name left me with an orphan sync partnership.  Is anyway to disconnect this partnership?  I have not been able to find a way.  Thank you.

    original title: orphans of sync partnership

    Hello

    Your question is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for Windows Vista Networking forums. Please ask your question in forum Windows Vista Networking TechNet.

    http://social.technet.Microsoft.com/forums/en-us/itprovistanetworking/threads

  • How to move the FILE from one place to another and keep "Indexing" have to move to the unknown location so you can't discover its full file path? Windows instructions provide information wrong re: how to do this!

    Make a bunch of audio files, placed in a folder on my desktop. Files initially sent to RealPlayer to burn, but when finished burning CD and went to read a CD, folder got seized by Media Player, 'Indexed' and disappeared from the office. I'm a relatively new computer user, and I need to learn more about file paths, how to view the path FULL of a file on my computer and how to type (create) full path when I need to. The "Indexing" feature seems to erase this lesson for me, and after having spent four hours trying to find Vista instructions on "How to move the file from one place to another", I gave up! Windows 'Help and Support' on my computer gives wrong directions. It states that if I right click on a folder > properties, a dialog box opens with a tab by which I can move my account. There is no tab location here. I found locations tab when right click on the "Mobile" folder, but still no option to "move file". No idea what is the folder "Roaming" or why it's on my computer. I want my audio files in the My Music folder, but this place is "access denied." Don't know how to get the audio file it in any case, but if anyone has any advice, I would be very happy! Thank you. PS - I had no problem moving folders in XP. I don't like the idea that a computer is to decide where to put my files. I want to control where I put my files. I don't like the way search works under Vista. I liked the XP search companion better because, for a computer fool like me, it was really easy to organize and find files and folders and had an option specific to find audio and video file TYPES.

    Here is an article on how to move your personal folders in Vista: http://www.howtogeek.com/howto/windows-vista/moving-your-personal-data-folders-in-windows-vista-the-easy-way/.  If you're talking about the special folders (such as photos, Documents, office...), then here is an article on how to move: http://www.winhelponline.com/articles/95/1/How-to-move-the-special-folders-in-Windows-Vista.html.

    If you have trouble with the search after you move the files, then rebuild the index: http://www.tech-recipes.com/rx/2103/vista_rebuilding_the_search_index/.  Here is an article on how to use Indexing Options in Vista that may be useful for you: http://www.vistax64.com/tutorials/69581-indexing-options.html.

    If the above does not help, your problem seems to relate to the image of the files/folders and their interactions with Media Center (which operate on different other folders).  Please repost your question in images and video Forum at: http://social.answers.microsoft.com/Forums/en-US/vistapictures/threads where the people who specialize in issues of the image will be more than happy to help you with your quesitons.

    Good luck!

    Lorien - MCSA/MCSE/network + / has + - if this post solves your problem, please click the 'Mark as answer' or 'Useful' button at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • My headset doesn't work more than one second to another second

    Hello world

    My headset doesn't work more than one second to another second

    I was talking with my friend, everything was fine but I started eating and I turned off the microphone with the switch based cable.

    My friend asked him something, I wanted to answer then I switched back on it. We did this several times, but after 4-5. marketing, he was not able to hear me more. I tried with other micro there must be something with my pc (del or related more difficult)

    I tried everything already, even downloaded the MicrosoftFixitAudioRecording.RNP.Run.exe. I ran, but could not solve the problem.

    He said that "the Audio recording device is disconnected.

    However his trendy ofc, but anyway his doesn't...

    Can someone help me please?

    My partners can not hear me, so I just had the problem with the microphone part. The headphone speakers works well.

    All the drivers are up to date. The computer is new (~ 2.5 months)

    I run Windows 7 64 bit

    Hardver specifications I can add later if his need.

    Thanks for any help in advance. Best regards; Rizkay

    PS. : sry for my bad English

    Hi Rizkay,

    Thanks for posting your query on the Microsoft Community.

    According to the description, I understand that this headset stopped working.

    There may be a hardware conflict.

    I suggest to try the steps in the Microsoft Help Article below and check if that helps.

    http://Windows.Microsoft.com/en-us/Windows/tips-fixing-common-sound-problems#tips-fixing-common-sound-problems=Windows-7

    You can view the help on the question below link
    Connect a microphone music player or other audio to your computer device -
    http://Windows.Microsoft.com/en-us/Windows7/connect-a-microphone-music-player-or-other-audio-device-to-your-computer

    Hope this information helps. Please let us know if you need any other help with Windows in the future. We will be happy to help you.

  • How to copy a profile for a child from one device to another family safely direct windows for Windows 7

    How to copy a profile for a child from one device to another family safely direct windows to Windows 7? I have several devices on Windows 7 and my child has ins journal to each device. I want safety to be entirely copied from one to the other devices. How can I do?

    Hello

    Thanks for posting your question on the Microsoft community.

    Thank you for your query details.

    I also appreciate your concerns about security for the family.

    I suggest to read the following article and check.
    Reference:
    http://Windows.Microsoft.com/en-us/Windows/set-up-family#set-up-family=Windows-7

    See also this wiki article created by Lonnie_L on August 24, 2013.
    Family Safety: frequently asked Questions
    http://answers.Microsoft.com/en-us/Windows/wiki/windows_other-security/family-safety-frequently-asked-questions/5672f7b2-e3c0-498a-9a6c-c9cab39f68e5

    I hope this information helps.

    Please let us know if you need more help.

    Thank you

  • Install Windows 7 from one computer to another

    Hi all

    I got this question I was not able to find an answer yet and I wonder if anyone of you could help me out here.

    I had a laptop that I use for work, which has Windows 7 Ultimate and a lot of software and personal files, I need. I recently bought a new more powerful laptop that will replace the one I use at the moment.

    My question is,

    Can I do a full to the top of the computer that I use and put it on the new computer, I will get? And then update the laptop with its own pilots?
    Is worth it to do a cleaning installation at all instead?
    Is it possible to transfer files and software from one machine to another using some sort of tool such as that used for XP to 7 or Vista to 7? Do we not have a Win 7 for Win 7 one?

    Thank you
    Sam

    Hi sam,

    You can take a full backup of the data on your computer and transfer it to the new computer, but for the application, you need to install a new copy of the same thing.

    You can even use transfer Windows-a tool that helps you transfer files and settings from one computer to the other. But as you mentioned that you transfer to a powerful computer hardware and software conflict may appear, if you have a full backup you can perform a clean installation.

    See the below for the links to learn more about Windows Easy transfer: transfer files and settings from another computer: http://windows.microsoft.com/en-US/windows7/transfer-files-and-settings-from-another-computer

     

    Transferring files and settings: frequently asked questions: http://windows.microsoft.com/en-us/windows7/transferring-files-and-settings-frequently-asked-questions

    Thank you, and in what concerns:

    Samhrutha G S - Microsoft technical support.

    Visit our Microsoft answers feedback Forum and let us know what you think.

  • move the SSL Cert from one device to another on Cisco ASA

    Hi all

    Is it possible to have a certificate SSL + key of a cisco asa to another? I hope its possible and if anyone can guide me to fix the documentation that would be perfect.

    Thank you

    Manish

    Hello

    This document will do it for you

    http://www.Cisco.com/en/us/products/ps6120/products_configuration_example09186a00809fcf91.shtml#copycert

    Check the How to copy one ASA to another SSL certificates

    Kind regards

    Any other questions... Sure... Be sure to note all my answers.

  • Mask of the copy from one Clip to another in SG CS6

    Hello everyone, I have a very basic question beginner on the use of masks in Speedgrade. I'm new to this, so please forgive me.

    Is it possible to copy a mask from one clip to another? For example, I have a simple shot-reverse shot sequence going. As you can see below, my sequence of cutting in both sense between a man and a woman. The mask that I use is to correct man's shirt because it's too bright. I use the mask feature follow-up because the shot zooms in slowly. So, again, I'm sorry if it's a ridiculously stupid question, but do I have to create a new mask every time it cuts back to humans or is there a way to copy and paste the mask so that it is usually in the right place and I can customize it?


    sg.jpg

    fast thinking and support out of focus - save under the glance, then apply this LOOK for the next clip work? Look keeps the mask.

    What about the clip cut back and zoom - like sequence multicamera two cameras? I work with the source, two layers separate, if the camera is fixed and no zoom in the source sequence, work with the source, hide the shirt, no slow zoom for mask to follow, the only movement of person.

    talk quickly

Maybe you are looking for

  • problem with library

    When I delete the photo after photo scan (face), I have the white point in my library. How to fixed it?

  • can not connect... reset email not received

    can not sign / log. tried to reset the password but never received an e-mail with the link.

  • Compaq presario cq57-439wm: administrative password or power on

    I have a computer, you have forgotten the password I have let a guy who said he knew what he was doing to watch, I think he's done worse. Now when I connect I don't even no opportunity to press f whatever they tell me to press on. He asked the admini

  • LaserJet 4050TN: 4050 duplexer

    I have a LaserJet 4050TN and I'm looking for a Duplexer for her. On the web, there are sites that show that the C4123A and C8054A work in the 4050. I know that the C8054A is used in the 4100 series. My question is the C8054A compatible backwards and

  • Linksys bridge to extend your wireless Signal

    Hello I just installed a Linksys WRT160N router. The signal started of good about 50 to 70 feet of the location of routers. Now the signal is part as low in many, 54 Mbps. I was wondering what options I might have to install a wireless for the expans