ASA NAT Clarification

ayojosh2k — Fri, 21 Feb 2020 12:30:27 GMT

Hello All

Please i need to be clear on a point:

static(inside,outside) 10.10.10.1 11.11.11.1 netmask 255.255.255.0

the same as

static(outside,inside) 11.11.11.1 10.10.10.1 netmask 255.255.255.0????

beavis9663 — Fri, 18 Nov 2011 14:48:08 GMT

No, they are not same. The order of a static NAT is:

static (real_interface,mapped_interface) mapped_ip real_ip netmask mask

What you do is: static(more secure network, less secure network). So you can do any of these:

static(dmz,outside) etc.

static(inside,dmz) etc.

static(inside,outside) etc.

If your case you should do: static(inside address, outside address) 100.100.100.100 192.168.10.1 netmask 255.255.255.255

This will NAT the outside address 100.100.100.100 to the inside address 192.168.10.1.

HTH

topic ASA NAT Clarification in Network Security