topic NAT for 3 OUTSIDE and 1 INSIDE & 1 DMZ in Network Security

NAT for 3 OUTSIDE and 1 INSIDE & 1 DMZ

Herald Sison — Sun, 15 Oct 2023 14:46:18 GMT

Hi All,

Would you recommend to add 3 Manual Dynamic NAT or may it cause some traffic problems?

or Is it ok to use 1 Manual Dynamic and the other 2 are Auto Dynamic?

or 3 Auto Dynamic?

by the way i have 1 Inside Zone and 1 DMZ zone and i am using PBR Flexconfig to distribute my internal lan traffic and Dmz to these 3 outside interfaces accordingly and i am using FMC 7.3.0 for FTD 7.0.5

Thanks

Re: NAT for 3 OUTSIDE and 1 INSIDE & 1 DMZ

MHM Cisco World — Sun, 15 Oct 2023 14:56:50 GMT

The auto and manual NAT order is effect only static and dynamic NAT search order for same outside interface.

I See here you need only dynamic NAT from inside to three outside interface

So three auto NAT is ok.

Re: NAT for 3 OUTSIDE and 1 INSIDE & 1 DMZ

Herald Sison — Sun, 15 Oct 2023 15:05:37 GMT

how about 3 manual NAT? would that be ok also no traffic problems?

Re: NAT for 3 OUTSIDE and 1 INSIDE & 1 DMZ

MHM Cisco World — Sun, 15 Oct 2023 15:29:08 GMT

Sure you can alos use three manual NAT but I prefer use auto NAT.

Keep manual only for static NAT' in such in feature if you want to add static NAT you can config it as manual and it will automatically be above auto NAT.