Policy based NAT on cisco2901/k9

Question

Hello collegues,
i have a problem with configuring following application:
(192.168.0/24)--->                
                           outside[ 10.0.0.1 tcp/500 ]inside ----> [172.16.0.1 tcp/501,tcp/502]
(192.168.1/24)--->
what i am trying to get, is to make tcp-connections
from outside network 192.168.0/24 to 10.0.0.1:500  forwarded to inside host 172.16.0.1:501 and
from outside network 192.168.1/24 to 10.0.0.1:500  forwarded to inside host 172.16.0.1:502
connections originated from outside to 10.0.0.1, which is virtual ip on cisco2901/k9
any ideas how to configure this?
thanx in advance
Tima

Answer 1

Hi,
You should really make a new post for asking an question.
But to my understanding with the new NAT format your above configuration would be done like this.
object-group network POLICY-PAT-SOURCE
network-object 192.168.10.0 255.255.255.0
object-group network POLICY-PAT-DESTINATION
network-object 172.27.15.0 255.255.255.0
network-object 10.125.81.0 255.255.255.0
nat(inside,outside) source dynamic POLICY-PAT-SOURCE interface destination static POLICY-PAT-DESTINATION POLICY-PAT-DESTINATION
The above things are doing the following (from top down)
Define the source addresses for the Policy PAT
Define the destination addresses for the Policy PAT
Define the actual Policy PAT that will translate traffic coming from "inside" interface from the source addresses defined in POLICY-PAT-SOURCE to interface "outside" IP address WHEN connecting to the destination addresses defined in the object-group POLICY-PAT-DESTINATION
Please rate if it helps
- Jouni