dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
3
share rss forum feed

aryoba
Premium,MVM
join:2002-08-22
kudos:4
reply to fcisler

Re: static NAT with ASA5505

Concern/Comment:
If you have some managed device with no access, then perhaps the device should be in DMZ with security level lower than 100

As to your question, NAT would be something doable. Simply create dynamic or static NAT between the VLAN 210 and other interfaces, assuming you place VLAN 210 in its own security zone outside the Inside and the Outside zones. If the VLAN 210 is sharing the same zone as the Inside, then simply migrate it into its own security zone (i.e. Edge zone) and then implement the NAT.