topic Re: 8.3 nat changes in Network Security

8.3 nat changes

romanrodichev@iementor.com — Mon, 11 Mar 2019 19:17:46 GMT

Is anyone else annoyed with the changes in 8.3 nat configuration? Or maybe I'm doing it wrong. In the past, something like this would just be two lines:

object network obj-10.204.1.10-47808

host 10.204.1.10

object network obj-10.204.1.10-21068

host 10.204.1.10

object network obj-10.204.1.10-47808

nat (inside,outside) static interface service tcp 47808 47808

object network obj-10.204.1.10-21068

nat (inside,outside) static interface service tcp 21068 21068

Re: 8.3 nat changes

Jennifer Halim — Thu, 02 Dec 2010 23:19:41 GMT

Yes, unfortunately there is quite a huge change in the NAT configuration from ASA version 8.3 onwards.This is to cater for more flexibility within the NAT feature which the earlier version is lack of. I guess we are all trying to get used to the new format at this point

Re: 8.3 nat changes

Kureli Sankar — Fri, 03 Dec 2010 03:26:38 GMT

Jenn is right.

You can compare old and the new here: https://supportforums.cisco.com/docs/DOC-9129

-KS

Re: 8.3 nat changes

Roman Rodichev — Fri, 03 Dec 2010 08:23:12 GMT

With all due respect, this change doesn't make any sense. I understand that NAT will be more "flexible" than it was before, but it could have been done without such drastic change on CLI configuration. I've just converted a large NAT config to new style and it looks terrible now.