topic forget PIX "static NAT" if I Set ASA Interfaces to "same security level" ? in Network Security

forget PIX "static NAT" if I Set ASA Interfaces to "same security level" ?

Alfred Berberich — Fri, 21 Feb 2020 12:29:54 GMT

Hallo

I migrate our PIX enviroment to ASA at the moment

As I understood "static nat" like :

static (dmz1,dmz2) 10.0.0.1 10.0.0.1 netmask 255.255.255.255

is only needed for PIX where I had low security --> higher

If I set all the ASA interfaces to the same security level I can forget the "static nat" for migration

Thats right ?

sincerely Alfred

Jennifer Halim — Thu, 03 Nov 2011 13:58:01 GMT

Yes, you are correct if all interfaces have the same security level, then you don't need to configure "static nat".

However if you have dynamic NAT, here is more information on the same security level interface: