ASA prohibits syslog NAT address translation test

1. Topology map

For audit purposes, the source address of the syslog must be the actual address of the device, and for other reasons, the Syslog server cannot be placed in the intranet.

2. Interface configuration:

R1:

R1 (config) #int f0/0

R1 (config-if) #ip add 10.1.1.18 255.255.255.0

R1 (config-if) #no sh

R2:

R2 (config) #int f0/0

R2 (config-if) #ip add 10.1.1.28 255.255.255.0

R2 (config-if) #no sh

R3:

R3 (config) #int f0/0

R3 (config-if) #ip add 20.1.1.38 255.255.255.0

R3 (config-if) #no sh

Asa:

Interface ethernet0/0

Nameif inside

Security-level 100

IP address 10.1.1.1 255.255.255.0

Interface ETHERNET0/1

Nameif outside

Security-level 0

IP address 20.1.1.1 255.255.255.0