topic Trying to us object-group and PAT in Network Security https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124026#M395643 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>That is just the name&nbsp; ( and yes they used that name because of that) but it can also be used on a singular nat ( I mean no use of the destination keyword)</P></BODY></HTML> Tue, 13 Nov 2012 22:01:02 GMT Julio Carvajal 2012-11-13T22:01:02Z Trying to us object-group and PAT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124021#M395628 <P>I am trying to configure dynamic PAT on a Cisco ASA 5510 using an object-group and having difficulty.</P><P></P><P>How can I use an object-group, which includes five subnets, as a source for NATing to a dynamic PAT address?</P> Tue, 12 Mar 2019 00:22:52 GMT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124021#M395628 weichenb2 2019-03-12T00:22:52Z Trying to us object-group and PAT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124022#M395632 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>Okay so you already created the object-group ( Let's say it's called <STRONG>internal_subnets</STRONG>)</P><P></P><P>So nat should be :</P><P>nat (inside,outside) source dynamic <STRONG>internal_subnets </STRONG>interface</P><P></P><P>In the last example it will get patted to the outside interface, if you want to PAT it to a different IP than the outside interface just create a object network host and use it on the NAT instead of the interface keyword,</P><P></P><P>Regards,</P><P></P><P>Julio</P></BODY></HTML> Tue, 13 Nov 2012 19:36:01 GMT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124022#M395632 Julio Carvajal 2012-11-13T19:36:01Z Trying to us object-group and PAT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124023#M395634 <HTML><HEAD></HEAD><BODY><P>Should the "nat (inside,outside) source dynamic internal_subnets interface"<STRONG> command be under the object-group?</STRONG></P></BODY></HTML> Tue, 13 Nov 2012 19:45:48 GMT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124023#M395634 weichenb2 2012-11-13T19:45:48Z Trying to us object-group and PAT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124024#M395636 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>No, that command is for twice NAT not auto-nat ( object_nat)</P><P></P><P>Julio</P></BODY></HTML> Tue, 13 Nov 2012 19:47:22 GMT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124024#M395636 Julio Carvajal 2012-11-13T19:47:22Z Trying to us object-group and PAT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124025#M395639 <HTML><HEAD></HEAD><BODY><P>Does "twice NAT" mean two-way NAT?</P></BODY></HTML> Tue, 13 Nov 2012 21:49:31 GMT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124025#M395639 weichenb2 2012-11-13T21:49:31Z Trying to us object-group and PAT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124026#M395643 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>That is just the name&nbsp; ( and yes they used that name because of that) but it can also be used on a singular nat ( I mean no use of the destination keyword)</P></BODY></HTML> Tue, 13 Nov 2012 22:01:02 GMT https://community.cisco.com/t5/network-security/trying-to-us-object-group-and-pat/m-p/2124026#M395643 Julio Carvajal 2012-11-13T22:01:02Z