topic Re: Need NAT configuration for ASA5508-X in Network Security

Need NAT configuration for ASA5508-X

Richa05 — Fri, 21 Feb 2020 15:36:45 GMT

I want to know how to create a NAT rule in Cisco ASA if i am having these details with me

1. Source address---It is an object group/groups of 2-3 Hosts

2.Destination address---Object group of two or more host

Source object is part of Internal network and want to access FTP via wan connection.

I am doing this via ASDM by going into NAT rules where i defined source interface as Internal network and Destination interface of wan.

Just want a clarification on Translated source address...Do i need to define Source objects here or wan IP.

Re: Need NAT configuration for ASA5508-X

Ben Walters — Mon, 09 Apr 2018 12:13:10 GMT

For translated source address it would be an address on your WAN interface side but it depends on what you are trying to accomplish. If you are doing dynamic NAT (multiple addresses to one) one rule would do it for you, but if you are looking to have static NAT for each host you would want to use multiple rules.

Re: Need NAT configuration for ASA5508-X

Richa05 — Mon, 09 Apr 2018 12:35:47 GMT

Yes, i want to accomplish dynamic nat(hide)

Re: Need NAT configuration for ASA5508-X

Ben Walters — Mon, 09 Apr 2018 15:13:33 GMT

Then yes, for the NAT rule you can say:

Source intf: Inside interface

Dest intf: WAN interface

source: "Inside object group"

destination: "WAN object group"

Translated source: WAN IP (or WAN interface in general for dynamic NAT)

Translated destination: Original

You can also specify the service if you really want to for FTP.

Re: Need NAT configuration for ASA5508-X

Richa05 — Tue, 10 Apr 2018 06:38:48 GMT

Thank you so much for this information Ben