ASA static NAT

Halil.Zakaria — Tue, 12 Mar 2019 07:06:25 GMT

hello,

is it normal to find two identic NAT translations for a unqiue static nat statement. ?

HOSTNAME# sh runn | i INSIDE_nat_static_syntesys
access-list INSIDE_nat_static_syntesys_1 extended permit ip host FRCOCAT object-group Grp_Net_Syntesys

static (INSIDE,DMZ-Prod) 172.24.4.1 access-list INSIDE_nat_static_syntesys_1

HOSTNAME#
HOSTNAME# sh xlate detail | i 172.24.4.1
NAT from INSIDE:FRCOCAT to DMZ-Prod(INSIDE_nat_static_syntesys_1):172.24.4.1 flags s
NAT from INSIDE:FRCOCAT to DMZ-Prod(INSIDE_nat_static_syntesys_1):172.24.4.1 flags s
HOSTNAME# sh xlate | i 172.24.4.1
Global 172.24.4.1 Local FRCOCAT
Global 172.24.4.1 Local FRCOCAT
HOSTNAME#

Your help is always precious to us

Hi Halil,

Akshay Rastogi — Tue, 05 Jan 2016 17:15:20 GMT

Hi Halil,

I believe there are two destination IPs defined in the access-list 'INSIDE_nat_static_syntesys_1' that is the reason it is showing two xlate entries for the single NATTed IP.

It is expect and nothing wrong. It is as per design.

Hope it answers your queries.

Regards,

Akshay Rastogi

Remember to rate helpful posts.

topic ASA static NAT in Network Security

ASA static NAT

Hi Halil,