topic Re: ASA NAT in Network Security

ASA NAT

SathishkumarSaravanan0348 — Fri, 21 Feb 2020 17:32:22 GMT

Hello Experts,

In ASA new request came to create the NAT as per below. Whether the below NAT is correct? Because after interface there is no interface type. IS this is the static NAT?

ASA

object network obj-10.243.216.128

subnet 10.243.216.128 255.255.255.128

nat (inside,outside) source dynamic obj-10.243.216.128 interface

Regards,

Sathish

Re: ASA NAT

jj27 — Mon, 30 Sep 2019 13:25:10 GMT

That is not a static NAT. It is a dynamic NAT that will hide the entire subnet behind whatever your "outside" interface IP address is configured as.

Re: ASA NAT

Deepak Kumar — Mon, 30 Sep 2019 14:15:05 GMT

Hi,

It is not a static NAT. It is a dynamic NAT from Inside to outside.

For static NAT, Visit at:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/nat_static.html

This is for ASA 8.2 so it may change as your ASA version.

Re: ASA NAT

SathishkumarSaravanan0348 — Mon, 30 Sep 2019 14:21:18 GMT

Thanks. so after the interface there should be "outside" right?

Re: ASA NAT

jj27 — Mon, 30 Sep 2019 14:58:37 GMT

No you do not need to define it. The syntax you provided above is correct.

The interface "outside" is implied since it is defined in the nat (inside,outside) statement.