topic converting 8.2 to 9.0 NAT example in Network Security

converting 8.2 to 9.0 NAT example

DannyHuston — Tue, 12 Mar 2019 02:01:07 GMT

I've gotten most of my NATs figured out but how do you convert this example into the new NAT format? CAn anyone assist?

static (INSIDE,OUTSIDE) tcp 10.10.10.1 www 20.20.20.1 www netmask 255.255.255.255

static (INSIDE,OUTSIDE) tcp 10.10.10.2 11080 20.20.20.2 9090 netmask 255.255.255.255

Jouni Forss — Thu, 20 Jun 2013 16:04:24 GMT

Hi,

You can use these configurations

object network STATIC-PAT-TCP80

host 20.20.20.1

nat (INSIDE,OUTSIDE) static 10.10.10.1 service tcp 80 80

object network STATIC-PAT-TCP9090

host 20.20.20.2

nat (INSIDE,OUTSIDE) static 10.10.10.2 service tcp 9090 11080

Then you can allow the traffic in your "OUTSIDE" interface ACL like this

access-list OUTSIDE-IN permit tcp any object STATIC-PAT-TCP80 eq 80

access-list OUTSIDE-IN permit tcp any object STATIC-PAT-TCP9090 eq 9090

Naturally you use the ACL name of the ACL currently attached to your "OUTSIDE" interface.

Hope this helps

Please do remember to mark the reply as the correct answer if it answered your question.

- Jouni

DannyHuston — Thu, 20 Jun 2013 16:12:08 GMT

Thanks!

ttnilicense — Thu, 10 May 2018 09:48:48 GMT

Hi Jouni Forss,

Please help me regarding this configuration to convert into 9.1. Appreciate the response.

global (outside) 2 150.x.x.x

nat (inside) 2 10.1.200.0 255.255.255.0 tcp 100 100