I have a Twice NAT routing question. How do I forward an IP packet based on the pre-translated destination? Right now I have conflicting subnets between two sites which is why I am doing the Twice NAT. However, I believe the Cisco ASA is routing based on the post-translated address and therefore not forwarding the packet in the correct direction.
Here's my code
interface GigabitEthernet0 nameif inside security-level 100 ip address 10.10.201.1 255.255.255.0 interface GigabitEthernet3 nameif outside security-level 0 ip address 10.255.255.1 255.255.255.252 object network SideA-PC_real host 10.10.17.55 object network SideA-PC_map host 10.252.28.55 object network SideB-PC_real host 10.10.17.155 object network SideB-PC_map host 10.251.4.155 route outside 10.10.1.0 255.255.255.0 10.255.255.2 1 route inside 10.10.17.0 255.255.255.0 10.10.201.2 1 route outside 10.251.4.0 255.255.255.0 10.255.255.2 1 nat (inside,outside) source static SideA-PC_real SideA-PC_nat destination static SideB-PC_nat SideB-PC_real
The debug logs show the translation happening exactly as I want, however a tcpdump from SideB shows it never gets forward there.
Pings only work if i add
route outside 10.10.17.155 255.255.255.255 10.255.255.2 1
to the ASA. Which I believe is because it is more specific than the 10.10.17.0 inside route.