SNAT to single host using object-group service

Samuel Eng — Tue, 12 Mar 2019 05:14:56 GMT

Hi, I have a single host that I want to static nat a number of services to. I want to use service object groups to simplify commands. I guess the beginnig is:

object-group service OG-SERVICES-INSIDE-MYSERVER
service-object tcp destination eq ftp
service-object tcp-udp destination eq www
service-object tcp destination eq 1723

object network NETWORK_OBJ_INSIDE-MYSERVER
host 192.168.1.100

How would the NAT configuration be?

Hi Samuel, I think object NAT

Rishabh Seth — Fri, 19 Dec 2014 04:23:06 GMT

Hi Samuel,

I think object NAT does not allow us to use service object-group.

In order to achieve your requirement we need to create network object per static nat per service.

This is because there can be only one nat statement per network object.

Hope this helps.

Thanks,

Rishabh

topic SNAT to single host using object-group service in Network Security

SNAT to single host using object-group service

Hi Samuel, I think object NAT