ASA 8.4 NAT Command Selection

Cody Ridge — Mon, 11 Mar 2019 20:55:04 GMT

Hello,

I am designing a new NAT configuration for an ASA 8.4

On my PIX 8.0 configuration I needed to allow bidirectional traffic between interfaces
with different security levels. For example, Inside at 100 and dmz at 50

To accomplish this in 8.0 I used a static NAT command along with any necessary ACLs.

Something like this:

Inside - 192.168.50.0
DMZ - 192.168.70.0

static (inside,dmz) 192.168.50.0 192.168.50.0 netmask 255.255.255.0

I now need to apply this same 8.0 config for 8.4. With the static command not available
in 8.4 I am unsure of which NAT commands to use to achieve the bidirectional traffic.

Should I use:

object network InsideDMZ
subnet 192.168.50.0 255.255.255.0
nat (inside,dmz) static InsideDMZ

Or, use commands such as:

object network InsideDMZ
subnet 192.168.50.0 255.255.255.0

nat (inside,dmz) source static InsideDMZ InsideDMZ

Thank you for your assistance

ASA 8.4 NAT Command Selection

varrao — Wed, 06 Jul 2011 02:14:03 GMT

Hi Cody,

Use the second nat statement, that is the right one.

Thanks,

Varun

topic ASA 8.4 NAT Command Selection in Network Security

ASA 8.4 NAT Command Selection

ASA 8.4 NAT Command Selection