topic After Auto NAT question in Network Security

After Auto NAT question

shastymacnasty — Tue, 12 Mar 2019 09:39:25 GMT

Hi,

I have created a Public Server config and it has created an auto-NAT of the following:

object network IP.10.xx.2.122
nat (Inside,Outside) static IP.164.xx.11.11

I also want to be able to PAT on my inside interface so the traffic knows

to return to the firewall, every time I add an After-Auto NAT the traffic

does not hit the After-Auto NAT rule.

Has anyone done a similar config?

My After Auto NAT rule is as follows:

nat (Outside,Inside) after-auto 2 source dynamic any IP.10.XX.201.11 destination static IP.10.xx.2.122-New IP.10.xx.2.122-New

Regards

Spooster IT Services — Tue, 04 Jul 2017 14:25:33 GMT

You don't need two NAT statements to achieve that. Add the following configuration and you will achieve what you want.

object network IP.10.xx.2.122
no nat (Inside,Outside) static IP.164.xx.11.11

nat (Outside,Inside) source dynamic any IP.10.XX.201.11 destination static IP.164.xx.11.11 IP.10.xx.2.122

shastymacnasty — Tue, 04 Jul 2017 14:49:44 GMT

That worked perfect, thanks Spooster, been staring at it too long! Appreciate it.

Spooster IT Services — Tue, 04 Jul 2017 14:52:49 GMT

Great.... Glad to hear. 🙂