topic Object and NAT in Network Security

Object and NAT

joshwa — Fri, 21 Feb 2020 16:34:23 GMT

Is there away to pull the object network name with both the host or subnet and nat configuration? Currently I am having to do a show run and copy the object with object-groups section along with the NAT sections, paste them into Sublime Text 3 and search for the names then put them together in a separate file to ID the configurations.

EX:

object network Stark_In_Space_Real
host 10.250.250.88

object network Stark_In_Space_MAP
host 1.1.1.1

object network Stark_In_Space

nat (inside,outside) static Stark_In_Space_MAP

What I am looking for to be displayed:

object network Stark_In_Space_Real
host 10.250.250.88

nat (inside,outside) static Stark_In_Space_MAP

I configured firewalls like this, so can I display like this?

Re: Object and NAT

Kasun Bandara — Thu, 13 Dec 2018 16:46:57 GMT

you can do object NAT in ASA as below.

object network Stark_In_Space_Real
host 10.250.250.88

object network Stark_In_Space_Real
nat (inside,outside) static interface service tcp 80 80

Re: Object and NAT

Sheraz.Salim — Thu, 13 Dec 2018 18:27:52 GMT

no there is no way you get the output the way you describe.

to get the result you have to

show run object network inline | i DY

show run nat

show nat interface XXXX

show nat

etc.

p.s

please rate if i answer you question

Re: Object and NAT

joshwa — Thu, 13 Dec 2018 20:42:08 GMT

I know how to pull the nat configuration. I was looking for away to get the full object network information without having to manually play the mad scientist and gluing everything back together to understand the full picture.

Re: Object and NAT

Sheraz.Salim — Thu, 13 Dec 2018 20:49:40 GMT

i can feel for you same happen with me when doing a tshoot on firewall in production network to put thing together in separate notpad