topic Multiple Static NATs with ASA 8.4.X Code in Network Security

Multiple Static NATs with ASA 8.4.X Code

lovedam — Mon, 11 Mar 2019 22:41:35 GMT

We have a need for an inside address to have more than one static NAT outside addresses. I know this wasn't possible before 8.3.X code. I still can't quite get it to work with 8.4.X code yet.

Here is what I had with 8.2 code.

static (inside,outside) 10.21.197.0 10.17.197.0 netmask 255.255.255.0

our inside network is 10.17.197.X/24. the current NAT we have in place is 10.21.197.X/24.

we need to add an additional NAT of 10.22.197.X/24 and I also have networks that will need to hit the address with no NAT.

I do know the source networks where I need each of the three cases:

from 172.20.X.X I need to hit the inside of 10.17.197.X natively, no NAT.

from 192.168.X.X i need to hit the inside of 10.17.197.X with 10.21.197.X NAT

from 10.10.X.X I need to hit the inside of 10.17.197.X with 10.22.197.X NAT

How can I accomplish this?

Thanks,

Damon

Multiple Static NATs with ASA 8.4.X Code

dchamorro — Tue, 13 Mar 2012 22:46:11 GMT

Damon,

This site should help you:

http://www.thenetworker.co.uk/blog/?p=1

You'll need to create a NO NAT static rule and two TWICE NAT rules defining the 192.168.x.x and 10.10.x.x source nets with the different destination NAT's.

Derek

Multiple Static NATs with ASA 8.4.X Code

lovedam — Tue, 20 Mar 2012 17:27:32 GMT

Derek,

thanks for the link. I will give this a shot this week.

Thanks,

Damon