topic If you will do it, it will in Network Security

ASA double NAT

Anthonize Rajaratne — Tue, 12 Mar 2019 08:47:59 GMT

Hello, I have my double nat config as below on an ASA.

object-group network inside-host
network-object host 10.10.105.41

object network 1st-nat
host 6.0.10.49

object network 2nd-nat
host 206.125.46.2

nat (inside,outside) source static inside-host 1st-nat destination static 2nd-nat 2nd-nat

My question is - Can I add a new host 10.10.105.42 inside the 'inside-host' object group? How will react when it comes to natting with 1st-nat and 2nd-nat?

Thanks.

If you will do it, it will

Pranay Prasoon — Wed, 18 Jan 2017 16:26:39 GMT

If you will do it, it will allow without any error. However it is a static NAT statement, so that both source IP should have different mapped address. Otherwise traffic coming to 6.0.10.49 will redirect to 10.10.105.41 but not 10.10.105.42

Thank you.

Anthonize Rajaratne — Wed, 18 Jan 2017 16:29:56 GMT

Thank you.