I have a Twice NAT routing question. How do I forward an IP packet based on the pre-translated destination? Right now I have conflicting subnets between two sites which is why I am doing the Twice NAT. However, I believe the Cisco ASA is routing based on the post-translated address and therefore not forwarding the packet in the correct direction.
Here's my code
interface GigabitEthernet0
nameif inside
security-level 100
ip address 10.10.201.1 255.255.255.0
interface GigabitEthernet3
nameif outside
security-level 0
ip address 10.255.255.1 255.255.255.252
object network SideA-PC_real
host 10.10.17.55
object network SideA-PC_map
host 10.252.28.55
object network SideB-PC_real
host 10.10.17.155
object network SideB-PC_map
host 10.251.4.155
route outside 10.10.1.0 255.255.255.0 10.255.255.2 1
route inside 10.10.17.0 255.255.255.0 10.10.201.2 1
route outside 10.251.4.0 255.255.255.0 10.255.255.2 1
nat (inside,outside) source static SideA-PC_real SideA-PC_nat destination static SideB-PC_nat SideB-PC_real
The debug logs show the translation happening exactly as I want, however a tcpdump from SideB shows it never gets forward there.
Pings only work if i add
route outside 10.10.17.155 255.255.255.255 10.255.255.2 1
to the ASA. Which I believe is because it is more specific than the 10.10.17.0 inside route.