topic ASA 8.4 NAT in Network Security

ASA 8.4 NAT

jrobey284 — Mon, 11 Mar 2019 23:43:18 GMT

I need to NAT some subnets to one IP and other subnets to another IP. The range command want work because some of the subnets are out of order.

For example subnets 192.168.1.0 - 192.168.7.0 and 192.168.25.0, 192.168.28.0 nat'd to 1.1.1.1. subnet 192.168.26.0-192.168.27.0 nat'd to 1.1.1.2

Jennifer Halim — Fri, 17 Aug 2012 09:43:38 GMT

object network obj-range-192.168.1.0-7.0

range 192.168.1.0 192.168.7.255

object network obj-192.168.25.0

subnet 192.168.25.0 255.255.255.0

object network obj-192.168.28.0

subnet 192.168.28.0 255.255.255.0

object-group network group-for-pat1.1.1.1

network-object object obj-range-192.168.1.0-7.0

network-object object obj-192.168.25.0

network-object object obj-192.168.28.0

object network obj-1.1.1.1

host 1.1.1.1

nat (inside,outside) source dynamic group-for-pat1.1.1.1 obj-1.1.1.1

object network range-192.168.26.0-27.0

range 192.168.26.0 192.168.27.255

nat (inside,outside) dynamic 1.1.1.2

jrobey284 — Fri, 17 Aug 2012 12:36:36 GMT

Thanks Jennifer for you help. This is going to work perfectly.