NAT Command Question

Tang-Suan Tan — Mon, 11 Mar 2019 21:51:25 GMT

Hi all :

I have below question that :

There is existing one subnet 192.168.1.0 subnet at the Inside Network. My customer wants another subnet 192.168.2.0 created in this Inside Network. Existing there is NAT command for this 192.168.1.0 subnet as below :

ASA5505(config)# global (outside) 10 interface

ASA5505(config)# nat (inside) 10 192.168.1.0 255.255.255.0

If I want to add this 192.168.2.x network in NAT, can I add the command as below in Bold?

ASA5505(config)# global (outside) 10 interface

ASA5505(config)# nat (inside) 10 192.168.1.0 255.255.255.0

ASA5505(config)# global (outside) 10 interface

ASA5505(config)# nat (inside) 10 192.168.2.0 255.255.255.0

ASA5505(config)# global (outside) 11 interface

ASA5505(config)# nat (inside) 11 192.168.2.0 255.255.255.0

The first one is still using 10 but the second one is used a new 11. Which one is correct or all are wrong and there is another way to do it, plaese advise. Thanks!

Best regards,

TangSuan

NAT Command Question

varrao — Wed, 16 Nov 2011 07:40:26 GMT

Hi Tang-Suan,

You just need one command to the existing nat stataments:

ASA5505(config)# global (outside) 10 interface

ASA5505(config)# nat (inside) 10 192.168.1.0 255.255.255.0

ASA5505(config)# nat (inside) 10 192.168.2.0 255.255.255.0

Thats's all you would need, nothing else.

Thanks,

Varun

NAT Command Question

Tang-Suan Tan — Wed, 16 Nov 2011 07:49:28 GMT

Hi Varun :

Thanks for your reply!

I will do it and let you know if I still have problem. Thanks!

topic NAT Command Question in Network Security

NAT Command Question

NAT Command Question

NAT Command Question