topic Basic ASA 9.0 NAT Question in Network Security

Basic ASA 9.0 NAT Question

rayamitchell — Tue, 12 Mar 2019 02:40:31 GMT

I am trying to configure global NAT on an ASA with version 9. I'm used to doing it on an older version so I would like to know if I am doing this correctly.

My goal is to simply nat the local lan (10.1.1.0) to the outside interface.

I setup the following object for the lan:

object network localnet

subnet 10.1.1.0 255.255.255.0

Then I put this line in for the nat translation

nat (inside,outside) source dynamic localnet interface

Am I doing this correctly?

Basic ASA 9.0 NAT Question

Oscar Castillo — Wed, 18 Sep 2013 17:50:34 GMT

ASA

CLI Commands

- Create an object:

object network AS2509

host 192.168.1.2

description Access Server 2509

- Create a NAT under de object-

nat (inside,outside) static interface service tcp 23 23

- Create an access List-

access-list outside_in line 4 remark Telnet (ACL's description, nothing relevant)

access-list outside_in line 5 extended permit tcp any object AS2509 eq telnet

- Create the Access Group-

access-group outside_in in interface outside

Basic ASA 9.0 NAT Question

rayamitchell — Wed, 18 Sep 2013 17:53:06 GMT

Please read my whole message.

My goal is to simply nat the local lan (10.1.1.0) to the outside interface.

Basic ASA 9.0 NAT Question

Oscar Castillo — Wed, 18 Sep 2013 18:19:01 GMT

Static and Global are gone, sorry buddy..

Old way to do it:

Pre 8.3 Old Config

Nat (inside) 1 10.0.0.0 255.255.255.0

global (outside) 1 interface

New way to do it:

Enjoy the reading

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080bf150c.shtml

Basic ASA 9.0 NAT Question

rayamitchell — Wed, 18 Sep 2013 19:21:59 GMT

so then:

object network localnet

subnet 10.1.1.0 255.255.255.0

nat (inside,outside) dynamic interface

correct?

Thanks

Basic ASA 9.0 NAT Question

mvsheik123 — Wed, 18 Sep 2013 19:40:58 GMT

Yeap. You got it.

Thx