topic Thanks for the quick answer. in Network Security

ASA 5510 Static NAT

winstonlimsk — Tue, 12 Mar 2019 08:20:50 GMT

Does the sequence of these NAT statements matter? I am using Cisco ASA 5510 version 8.0(3)19

static (inside,outside) 10.10.3.0 10.10.3.0 netmask 255.255.255.0
static (inside,outside) 10.10.3.102 10.10.3.181 netmask 255.255.255.255

Will the firewall still NAT 10.10.3.102 to 10.10.3.181 or it will just take the first line and NAT 10.10.3.102.to 10.10.3.102?

Thanks

Pawan Raut — Mon, 03 Oct 2016 07:33:08 GMT

Yes Sequence of NAT matters. It translate packet base on first matching rule in nat sequence.

You can test it by packet-tracer command

winstonlimsk — Mon, 03 Oct 2016 07:43:30 GMT

Thanks for the quick answer.

Pawan Raut — Mon, 03 Oct 2016 08:09:50 GMT

Could you please rate post and marked answer if you find this useful