Adil,

my answer would be

ASA2

static (inside,outside) 192.168.5.21 10.1.1.100

ASA1 - Context a1

static (dmz,outside) 192.1.12.21 192.168.5.21
static (dmz,outside) 192.1.12.22 192.168.5.22

which, looking now at Bruno's response is probably the same thing. The
solution provided I think is wrong, since the "static (inside,outside)
192.168.5.21 10.1.1.100" translation was done on ASA1 - context b1 in the
solution. I figure it was just a typo.

On Sat, Aug 6, 2011 at 7:43 AM, Adil Pasha <[email protected]> wrote:

> Thanks Bruno,
>
> The wording is wrong. The answer makes complete sense.
>
> Pretty complicated lab design. I am wondering if someone has it in real
> production environment...........:)
>
> I guess the hardship of the lab will make you perfect.
>
>
> Best Regards.
> ______________________
> Adil
>
> On Aug 6, 2011, at 8:26 AM, Bruno wrote:
>
> I like lab17. It shows how crazy our bud Tyson is :)
>
> In summary, 192.168.5.21 will be the ACS. You'll end up with 2 NATs for
> ACS, ASA1 will have .21 and .100 where .100 translates to 10.1.1.100
> directly and .21 translates to DMZ 192.168.5.21 and then translates to
> 10.1.1.100 on ASA2
>
> The wording can be wrong, but answer is right
>
> On Sat, Aug 6, 2011 at 2:00 AM, Adil Pasha <[email protected]> wrote:
>
>> Guys,
>> I am trying IPX Lab 17 tonight.
>>
>> Q 1.3 Says: On ASA2 192.168.5.21 should be translated to 10.1.1.100
>>
>> Ans 1.3: static (inside,outside) 192.168.5.21 10.1.1.100
>>
>> Is there a typo?
>>
>> Or am I not clear about the question. I hope I am wrong.
>>
>> Based on the question I would do:
>> static (outside,inside) 10.1.1.1 192.168.5.21
>> Just because it says 192.168.5.21 should be translated to 10.1.1.100. On
>> the drawing 192.168.5.21 is on the outside of the ASA2 and 10.1.1.100 is on
>> the inside network.
>>
>> Could someone please tell me why the solutions guide has the above answer
>> different then my answer?
>>
>>
>> Best Regards.
>> ______________________
>> Adil
>>
>> _______________________________________________
>> For more information regarding industry leading CCIE Lab training, please
>> visit www.ipexpert.com
>>
>> Are you a CCNP or CCIE and looking for a job? Check out
>> www.PlatinumPlacement.com
>>
>
>
>
> --
> Bruno Fagioli
> Cisco Security Professional
>
>
>
> _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out
> www.PlatinumPlacement.com
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to