topic Re: NAT pool using different subnet than interface address in Network Security

NAT pool using different subnet than interface address

sidcracker — Mon, 11 Mar 2019 18:26:13 GMT

Hello Everyone,

I have a Cisco ASA wherein I have configured 5 interfaces consisting of inside, outside, dmz1, dmz2 and vpn. When we are natting interfaces from the internal networks to outside, can we use a subnet that is different from the interface subnet? For example the outside interface address is 192.168.10.1/24, can we use nat pool with another subnet such as 172.16.10.0/24? My understanding would be to add routes to allow traffic to use the subnet.

Thanks

Re: NAT pool using different subnet than interface address

Jon Marshall — Tue, 17 Aug 2010 00:26:29 GMT

sidcracker wrote:

Hello Everyone,

Thanks

Yes, you can use any subnet you want as long as that subnet is routed back to the outside interface of your ASA.

Jon

Re: NAT pool using different subnet than interface address

mirober2 — Thu, 28 Oct 2010 20:00:52 GMT

Hi Brenda,

See Jon's answer above your post. He answered the previous poster that this can be done.

-Mike