After I received some help with my previous problem here, I finally was able to get our replacement Cisco firewall working, in absence of a proper sysadmin.
But this meant reducing our total amount of subnets. As the old network structure was a superfluously redundant, this was no big problem, but for one machine. One piece of software has an ip-address hardcoded (!), so until I get an updated version of that, I have to resort to some trickery.
Now while I was waiting for the new ASA to arrive, I had a Linux server as a firewall, where I actually managed to set this up, but for some kind of reasons (might be sleep deprivation...), I can't get it to work over the ASDM.
Basically I want to redirect ip address 172.16.7.19 (obsolete subnet) to 192.168.57.19, preferably just for one machine (172.16.4.42).
If I create a Static Policy NAT in ASDM 6.3 this only results in the following two entries:
access-list inside_nat_static extended permit ip host 172.16.4.42 host 172.16.7.19
access-list outside_nat_static extended permit ip host 172.16.4.42 host 172.16.7.19
No NAT, no mention of 192.168.57.19 at all. This is on a ASA 5510, IOS 8.2, ASDM 6.3.
Apparently CLI is the only way to go for most configuration issues. My time as a Unix programmer should have taught me that…
But this meant reducing our total amount of subnets. As the old network structure was a superfluously redundant, this was no big problem, but for one machine. One piece of software has an ip-address hardcoded (!), so until I get an updated version of that, I have to resort to some trickery.
Now while I was waiting for the new ASA to arrive, I had a Linux server as a firewall, where I actually managed to set this up, but for some kind of reasons (might be sleep deprivation...), I can't get it to work over the ASDM.
Basically I want to redirect ip address 172.16.7.19 (obsolete subnet) to 192.168.57.19, preferably just for one machine (172.16.4.42).
If I create a Static Policy NAT in ASDM 6.3 this only results in the following two entries:
access-list inside_nat_static extended permit ip host 172.16.4.42 host 172.16.7.19
access-list outside_nat_static extended permit ip host 172.16.4.42 host 172.16.7.19
No NAT, no mention of 192.168.57.19 at all. This is on a ASA 5510, IOS 8.2, ASDM 6.3.
Apparently CLI is the only way to go for most configuration issues. My time as a Unix programmer should have taught me that…