topic nat (DMZ,outside) source dynamic any interface in Network Security

nat (DMZ,outside) source dynamic any interface

mahesh18 — Tue, 12 Mar 2019 02:05:23 GMT

Hi Everyone,

Need to confirm NAT statement below

nat (DMZ,outside) source dynamic any interface in version 9.1.

So above line means NAT from DMZ to outside.

Need to know that source here means that we are NATing IP from DMZ?

any interface means NAT IP will be of outside interface IP?

Regards

MAhesh

Re: nat (DMZ,outside) source dynamic any interface

Jouni Forss — Sun, 30 Jun 2013 17:58:36 GMT

Hi Mahesh,

The below NAT configuration

nat (DMZ,outside) source dynamic any interface

Means the following

The NAT configuration is for connection between "DMZ" and "outside". Basicly for connection FROM "DMZ" to "outside"
The translation is a "dynamic" translation
It accepts "any" source address from behind the "DMZ" interface
It uses the "outside" "interface" IP address as the PAT address

So its a basic Dynamic PAT translations for the hosts behind "DMZ" interface and accepts any source address/network you might have behind "DMZ"

- Jouni

nat (DMZ,outside) source dynamic any interface

mahesh18 — Sun, 30 Jun 2013 18:41:46 GMT

Thanks Again

Regards

MAhesh