Simple NAT question

anowell — Tue, 12 Mar 2019 00:39:03 GMT

Will someone please explain what this NAT rules does? I'm confused by what happens to the packet when you use "dynamic" and a host that is 0.0.0.0

object network obj-0.0.0.0

host 0.0.0.0

object network ALL_ZEROS

subnet 0.0.0.0 0.0.0.0

nat (inside,outside) dynamic obj-0.0.0.0

Thanks in advance!

Simple NAT question

julomban — Wed, 19 Dec 2012 13:57:43 GMT

Hello,

You would use this type of NAT (Identity NAT) when you want to traffic from your inside interface to flow through to your outside interface without changing the address. An example scenario would be a private MPLS cloud with separate clients. Each client has a unique address space so NATing is not necessary. Using Identity NAT is the solution because it provides us with the privacy of only allowing inside hosts to initiate communication with outside hosts.

This is when your outside its a private range as well, if it is public you use regular PAT with the outside interface or any public IP:

object network ALL_ZEROS

subnet 0.0.0.0 0.0.0.0

nat (inside,outside) dynamic interface

On very specific/rare circumstances you want to use this NAT.

Regards,

Juan Lombana

Please rate helpful posts.

topic Simple NAT question in Network Security

Simple NAT question

Simple NAT question