Nat understanding

opnineopnine — Tue, 12 Mar 2019 05:24:06 GMT

Hi all.

I have the following nat configuration

name 10.168.100.12 other
name 181.10.147.22 other_Public

1.- global (outside) 2 other_Public netmask 255.255.255.0
!
2.- access-list outside_access_in extended permit tcp any host other_Public eq www
!
3.- static (inside,outside) tcp other_Public www other www netmask 255.255.255.255

I tried to access the ip 181.10.147.22, and it will open www to the ip 10.168.100.12. I see hitcnt on the acl

My question will be do I still need the global (outside) configuration?

Thanks.

"static" is the command for

Karsten Iwen — Mon, 26 Jan 2015 22:14:03 GMT

"static" is the command for static translations that can be used for outside->inside traffic. For that the global is not needed.

A global always corresponds to a "nat" statement for dynamic outgoing connections. You probably need that for all the other systems, but not for the mentioned connection.

More on NAT can be found in the config-guide.

topic "static" is the command for in Network Security

Nat understanding

"static" is the command for