topic Dear aditya, in Network Security

NAT dynamic and static Statements

jack samuel — Tue, 12 Mar 2019 09:35:55 GMT

Dears,

I am following the below link to understand the NAT above 8.3 and I have fall into one question, when we should use dynamic & static keyword in the TWICE or MANUAL NAT commands. .

As I know the dynamic keyword is for dynamic nat and static keyword is for static nat but in the below statement why it was necessary to use the dynamic keyword

nat (inside,dmz) source dynamic NET-10.129.100.47 obj-172.30.52.98 destination static obj-172.16.3.0 obj-172.16.3.0

Hi Jack,

Aditya Ganjoo — Sat, 17 Jun 2017 08:37:15 GMT

Hi Jack,

On newer ASA versions we have the ability to do Twice NAT which means we can use one nat for the source traffic and one for destination. Since we are having both source and destination nat in one statement we call this as Twice NAT.

In this case host 10.129.100.47 is getting dynamically Nat'd to 172.30.52.98 and in the other statement you have a static identity destination NAT which means 172.16.3.0 would be statically natd to 172.16.3.0 itself.

Remember we cannot use dynamic NAT for destination translation.

Regards,

Aditya

Please rate helpful answers and mark correct answers.

Dear aditya,

jack samuel — Sat, 17 Jun 2017 09:43:59 GMT

Dear aditya,

our source 10.129.100.47 want to reach a destination 172.16.3.0 , so as per your statement it is dynamically natted means what ???

It is natting with one ip 172.30.52.98 and not a pool of ip address so instead of dynamic I would use there a static keyword

Still I m confused what dynamic natting is happening in the statement what I see is all static one-to-one

Dears,

jack samuel — Wed, 28 Jun 2017 14:23:55 GMT

Dears,

Anybody can help me with the above query

thanks