topic Dynamic PAT only? in Network Security

Dynamic PAT only?

mahesh18 — Tue, 12 Mar 2019 02:18:25 GMT

Hi Everyone,

For below config need to know it will do the dynamic PAT only or it will do the Dynamic NAT + PAT?

object network inside_net

subnet 192.168.3.0 255.255.255.0

object network outhosts

subnet 172.16.5.0 255.255.255.0

nat (inside,outside) source dynamic inside_net interface destination static outhosts outhosts

Regards

Mahesh

Dynamic PAT only?

Jouni Forss — Mon, 29 Jul 2013 00:18:57 GMT

Hi Mahesh,

Yes, the mentioned configuration will do Dynamic PAT for the hosts under "inside_net". The IP address used for the PAT is the "outside" interface IP address.

This PAT is only done when the destination network is "outhosts"

- Jouni

Dynamic PAT only?

mahesh18 — Mon, 29 Jul 2013 00:30:21 GMT

Hi Jouni,

One last thing on this here we have destination mapped and destination real both as outhosts.

So when does Destination mapped and real changes does it change when we want to translate the Destination IP also?

Regards

MAhesh

Dynamic PAT only?

Jouni Forss — Mon, 29 Jul 2013 00:35:49 GMT

Hi,

Since the "outhosts" is set as both real and mapped destination address that essentially means that no NAT will be done for the destination network.

But at the same sime it means that this Dynamic PAT configuration will only apply when the destination network is

"outhosts"

if the destination real and mapped contained different network then it would mean that NAT would also be done for the destination network.

If you had this configuration

nat (inside,outside) source dynamic inside_net interface

Then it would mean that this Dynamic PAT would apply to every destination IP address/network.

- Jouni

Dynamic PAT only?

mahesh18 — Mon, 29 Jul 2013 01:06:05 GMT

Hi Jouni,

Seems it is enough to learn about NAT today.

Best Regards

Mahesh