Hello
I have an ASA 5510 8.2(1) that is setup up for a site-to-site vpn with our partner. There are two spare ports and I am trying to use those ports for an alternate path to the internet (we are procuring a couple of video conferencing devices and want to send that traffic out the ASA). I have configured an internal internal interface and an external interface. I created both a Global and Static NAT but nothing seems to work. When I try to access an external website, I see:
Built local-host VTC:143.166.83.38 followed by:
Deny TCP (no connection) from 143.166.83.38/80 to 10.76.253.141/63215 flags SYN ACK on interface VTC
What I have for my NAT statements are:
Global (newDMZ) 2 interface
nat (VTC) 2 10.76.25.141 255.255.255.255
I have also tried the following:
static (VTC,newDMZ) interface 10.76.25.141 netmask 255.255.255.255
I cant seem to get the internal IP address to translate to the external IP address. The NAT config is pasted below. Thanks in advanced!
nat-control
global (SiteVPN) 1 interface
global (newDMZ) 2 interface
nat (MP25) 0 access-list no_nat
nat (VTC) 2 10.76.25.141 255.255.255.255
static (MP25,xSiteVPN) x.x.x.8 10.76.3.12 netmask 255.255.255.255
access-group newDMZ_access_in in interface newDMZ
access-group newDMZ_access_out out interface newDMZ
access-group VTC_access_in in interface VTC
access-group outbound out interface VTC
access-list VTC_access_in extended permit ip any any
access-list newDMZ_access_out extended permit ip any any
access-list newDMZ_access_in extended permit ip any any
access-list newDMZ outbound extended permit ip any any
I have an ASA 5510 8.2(1) that is setup up for a site-to-site vpn with our partner. There are two spare ports and I am trying to use those ports for an alternate path to the internet (we are procuring a couple of video conferencing devices and want to send that traffic out the ASA). I have configured an internal internal interface and an external interface. I created both a Global and Static NAT but nothing seems to work. When I try to access an external website, I see:
Built local-host VTC:143.166.83.38 followed by:
Deny TCP (no connection) from 143.166.83.38/80 to 10.76.253.141/63215 flags SYN ACK on interface VTC
What I have for my NAT statements are:
Global (newDMZ) 2 interface
nat (VTC) 2 10.76.25.141 255.255.255.255
I have also tried the following:
static (VTC,newDMZ) interface 10.76.25.141 netmask 255.255.255.255
I cant seem to get the internal IP address to translate to the external IP address. The NAT config is pasted below. Thanks in advanced!
nat-control
global (SiteVPN) 1 interface
global (newDMZ) 2 interface
nat (MP25) 0 access-list no_nat
nat (VTC) 2 10.76.25.141 255.255.255.255
static (MP25,xSiteVPN) x.x.x.8 10.76.3.12 netmask 255.255.255.255
access-group newDMZ_access_in in interface newDMZ
access-group newDMZ_access_out out interface newDMZ
access-group VTC_access_in in interface VTC
access-group outbound out interface VTC
access-list VTC_access_in extended permit ip any any
access-list newDMZ_access_out extended permit ip any any
access-list newDMZ_access_in extended permit ip any any
access-list newDMZ outbound extended permit ip any any