topic Thank you. I'll test all in Network Security

Permit specific address on ASA for nat.

Lost & Found — Tue, 12 Mar 2019 06:25:36 GMT

Hi,

I would like to ask how to translate/permit specific host on firewall.

on 8.2ver I used nat (inside) 1 ipofhost and subnet

on 9.2 ver it notworking?

do i need to create a net object network for the spefic address to be allow?

please see the attached file.

thank you

Have a look at Jounis great

Karsten Iwen — Fri, 14 Aug 2015 08:31:18 GMT

Have a look at Jounis great document on the changes from 8.2-NAT to the new NAT-model:

https://supportforums.cisco.com/document/132066/asa-nat-83-nat-operation-and-configuration-format-cli

Hi Karsten,Thanks. but based

Lost & Found — Fri, 14 Aug 2015 10:12:15 GMT

Hi Karsten,

Thanks. but based on Jounis which is better setup for my scenario? thanks

Configure dynamic NAT for the

Karsten Iwen — Fri, 14 Aug 2015 10:22:06 GMT

Configure dynamic NAT for the whole internal network (or even "any"). The rest is controlled with Access-Control-Lists.

Hi karsten,But i think it's

Lost & Found — Fri, 14 Aug 2015 10:46:42 GMT

Hi karsten,

But i think it's not convenient. because for example

We are using 10.1.16/24 and 10.1.17.0/24 and we only want to permit 10.1.16.1 and 10.1.17.2/24

so the rest will be configured ACL manually?

thanks

ACLs and not NAT are the

Karsten Iwen — Fri, 14 Aug 2015 10:56:19 GMT

ACLs and not NAT are the tools for allowing and denying traffic. You should use it for what it's build. Although it was possible in older versions to handle that with NAT, it get's really complicated with actual ASA versions.

Thank you. I'll test all

Lost & Found — Fri, 14 Aug 2015 11:01:10 GMT

Thank you. I'll test all jouni sample hahahaa thanks