PIX/ASA static nat command

nsheridan — Wed, 13 Mar 2019 00:50:39 GMT

Hello fellow ciscoers,

My question relates to the use of the netmask command within the PIX/ASA. When used does this only translate the appropriate bits in the original ip address to the desired NAT address? For example:

If configure as follows:

static (inside,outside) 192.168.100.0 123.123.123.0 netmask 255.255.255.0

Then i send a packet with a source IP of say 192.168.100.50 through, then will the NAT address end up as 123.123.123.50.

Hence with a netmask of 24 bits will it not translate octect 4, and hence leave my "host bits" alone?

Thanks to all in advance

cheers nik

Re: PIX/ASA static nat command

richf — Thu, 13 Dec 2007 23:00:53 GMT

You are correct. Many times people will do one to one translations doing exactly the same things but keeping the inside and outside IP's the same. This is sometimes done on internal firewalls where you do not want to translate any addresses.

topic Re: PIX/ASA static nat command in Network Security

PIX/ASA static nat command

Re: PIX/ASA static nat command