Cisco ASA NAT Clarification

ravindra962 — Tue, 28 Jan 2020 13:41:08 GMT

Hello Guys

I am getting a little confused with NAT's. Please help me understand it Correctly

In the ASA Code before 9, when we have a Static NAT for an Internal IP, your ACL should have the NAT IP as destination to allow traffic from a Client to that IP address. The traffic is allowed through the ACL and then NAT is applied.

In the ASA code after 9. when we have a Static NAT for an Internal IP, your ACL should have the Internal IP as destination to allow traffic from a Client to that IP address. The NAT is applied first and the traffic is allowed through the ACL.

Please correct me if I am wrong.

Thanks

Ravi

Re: Cisco ASA NAT Clarification

Rob Ingram — Tue, 28 Jan 2020 13:51:39 GMT

Hi,
Yes, in ASA 9.x you would specify the real/private IP address and port, not the NATTED IP address/port.

HTH

topic Cisco ASA NAT Clarification in Network Security

Cisco ASA NAT Clarification

Re: Cisco ASA NAT Clarification