topic Re: dynamic NAT from outside to inside in Network Security

dynamic NAT from outside to inside

lukaszkhalil — Mon, 11 Mar 2019 14:28:08 GMT

Hello

Could you please let me know if it is possible to run the dynamic PAT on the FWSM module or ASA from the ouside to the inside interface, something like that:

nat (outside) 1 10.1.1.1 netmask 255.255.255.255

global (inside) 1 192.168.1.1

I tried to do that on my FWSM module but it seems not to work.

Thanks in advance

Regards

Lukas

Re: dynamic NAT from outside to inside

Jon Marshall — Sun, 21 Dec 2008 13:20:14 GMT

Lukas

I have used this on a pix and ASA before but not an FWSM but there is no reason why it should not work. One change to make in your config -

change

nat (outside) 1 10.1.1.1 netmask 255.255.255.255

nat (outside) 1 10.1.1.1 netmask 255.255.255.255 outside

ie. you need the keyword "outside" at the end of your nat statement.

Jon

Re: dynamic NAT from outside to inside

lukaszkhalil — Sun, 21 Dec 2008 13:41:11 GMT

Thanks it works !

Lucas

Re: dynamic NAT from outside to inside

lukaszkhalil — Sun, 21 Dec 2008 15:58:19 GMT

Hello

Is it possible that this nat with outside keyword can break the existing static (inside,outside)?

When I configure it, the dynamic NAT works but the static stops working.