topic Object-Group NAT Dynamic PAT in Network Security

Object-Group NAT Dynamic PAT

mumbles202 — Tue, 17 Sep 2019 20:55:49 GMT

Is there any issue w/ the following configuration:

object-group network obj_myinternal_ips
network-object host 172.16.23.20
network-objecthost 172.16.23.100

object network obj_myexternal

network-object host 192.168.23.200

nat (inside,outside) source dynamic obj_myinternal_ips obj_myexternal

where obj_myexternal is a public ip on the outside interface other than the interface ip?

Re: Object-Group NAT Dynamic PAT

Rob Ingram — Tue, 17 Sep 2019 21:22:24 GMT

Hi,
Yes that will work fine, those 2 IP addresses will be natted behind 192.168.23.200.
Obviously you need a space between object-group and host, but I'm guessing that's a typo.

HTH

Re: Object-Group NAT Dynamic PAT

mumbles202 — Wed, 18 Sep 2019 12:58:24 GMT

Thanks for the reply. Yes, that was a typo. I applied the configuration using 2 object-groups but otherwise the same as posted so I'll check if any issues today.