Global PAT

SHSCITHelpdesk — Tue, 12 Mar 2019 07:02:53 GMT

Hi All, i am currently replacing a PIX firewall with an ASA 9.5(1).

I have configured the access rules but i am unsure on the best way of configuring PAT on the external interface, which is automatic on the PIX.

I have created a container containing our 2 aggregated IP address ranges which are a /19 and a /20 subnet but testing has been unsuccessful.

When testing external access rules I can only connect if I create an object for the individual PC I am using and NAT (PAT Hide) that to the external interface.

I have tried doing the same thing using a network object for the local subnet the PC is on but this has also proved unsuccessful.

I can create an access rule for a group of individual (nat/pat hide) PCs but I would prefer to use PAT.

Any help appreciated.

Pete

1. Can you do a "sh run" and

Jon Are Endrerud — Thu, 17 Dec 2015 20:32:03 GMT

1. Can you do a "sh run" and dump the config here?

2. Have you tried to run the "packet tracer" ?, see whats happening ?

Here is how I do it-

Collin Clark — Thu, 17 Dec 2015 21:57:28 GMT

Here is how I do it-

object network obj_any
subnet 0.0.0.0 0.0.0.0

object network obj_any
nat (any,outside) dynamic interface

HTH

topic Here is how I do it- in Network Security

Global PAT

1. Can you do a "sh run" and

Here is how I do it-