topic Using Static NAT for network and host in Network Security

Using Static NAT for network and host

ROD FRANKLIN — Mon, 11 Mar 2019 22:13:24 GMT

Is it possible to use a static NAT for a network and then a different one for a host within that network.

Example:

static (inside,outside) 10.10.10.0 10.10.10.0 netmask 255.255.255.0

<---so that all 10.10.10.0 address are seen on outside as themselves---->

static (inside,outside) 10.10.10.5 11.11.11.5 netmask 255.255.255.255

<---so that 10.10.10.5 host is NAT'ed to different address--->

Using Static NAT for network and host

varrao — Thu, 12 Jan 2012 18:39:18 GMT

Hi Rod,

Yes it is very much possible, the more specific one will take the precedence over the other static nat for the network, , to verify it you can also run a packet tracer for it.

Packet-tracer input outside tcp 4.2.2.2 23456 11.11.11.5 80 detailed

and your static nat is not correct, it shoudl be:

static (inside,outside) 11.11.11.5 10.10.10.5 netmask 255.255.255.255

Thanks,

Varun

Using Static NAT for network and host

ROD FRANKLIN — Thu, 12 Jan 2012 20:04:08 GMT

Thanks for the help!