No router do not have default route towards firewall. I know that the router needs the route to reach to the destination, some how i don't want to do the default route. Is it any way on which the coming source from internet towards 10.10.10.15 will change to the natted ip instead of coming public ip.
--- On Mon, 11/29/10, Robert Maier <[email protected]> wrote: From: Robert Maier <[email protected]> Subject: Re: [c-nsp] Outside NAT issue To: [email protected] Date: Monday, November 29, 2010, 5:31 PM the static seems to be correct, hast the router a default route to the firewall ? Am 29.11.2010 14:34, schrieb Bunny Singh: > HI, > I have a ASA Firewall 5550 connected to both outside and customer >interface. Default route is there towards outside interface (Internet). 7600 >router is connected towards customer interface and ospf is running. > Now i have one private network (10.10.10.0/24) on 7600 router. I want to >access one machine having IP 10.10.10.15 from other place via internet (it >required to be access from anywhere internet) . I have tried to do the static >nat for the same ip in firewall, but still i am not able to receive the icmp >reply. I have checked through wireshark and found that the source coming to >the 10.10.10.15 was 77.77.77.77 which is not available on the 7600 router but >reachable through firewall. > following are the command > static (customer,outside) 119.252.X.X 10.10.10.15 255.255.255.255 > (we have our own public ip's i.e 119.252.x.x) > So how i can access the machine or any other config i can to fullfill my >requirement. > Regards > Bunny > > > > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
