topic Single Interface and two Zero NAT config on 8.2 in Network Security

Single Interface and two Zero NAT config on 8.2

mahesh18 — Sat, 30 May 2020 00:07:02 GMT

We have ASA running 8.2.

It has NAT 0 for Cisco VPN users below

nat(inside) 0 access_list Zero_NAT----------1

When I config new NAT 0 for IPSEC below

nat(inside) 0 access_list Exempt_NAT---------2

When I put NAT config line 2 it overwrites the NAT 0 line 1

Need to know is this be design?

or I need to do something different?

Regards

Mahesh

Re: Single Interface and two Zero NAT config on 8.2

mahesh18 — Sat, 30 May 2020 14:30:54 GMT

Can some one from Cisco answer this please?

Re: Single Interface and two Zero NAT config on 8.2

mahesh18 — Fri, 05 Jun 2020 14:01:59 GMT

Anyone can answer this please?

Re: Single Interface and two Zero NAT config on 8.2

Sheraz.Salim — Fri, 05 Jun 2020 15:39:28 GMT

Hi Mahesh18. you running the old code please consider doing upgrade to 9.x as not many of us know how to configured the old software which is not supported anymore by cisco.

can you try this.

nat(inside) 0 access_list Zero_NAT

nat(inside) 1 access_list Exempt_NAT

Re: Single Interface and two Zero NAT config on 8.2

mahesh18 — Fri, 05 Jun 2020 16:32:12 GMT

will below config do no nat for traffic for inside interface?

As i read only 0 does no nat?

nat(inside) 1 access_list Exempt_NAT

Re: Single Interface and two Zero NAT config on 8.2

Sheraz.Salim — Sat, 06 Jun 2020 07:43:55 GMT

my apologies you are right. I have not use a 8.2 image before. can you test this.

nat(inside) 0 access_list Zero_NAT

nat(inside) 0 access_list Exempt_NAT

if i convert this rule in asa 9.x nat (inside,outside) source static INSIDE INSIDE destination static OUTSIDE OUTSIDE