topic Re: two static nat order of operation in Network Security

two static nat order of operation

creamware — Mon, 11 Mar 2019 11:00:50 GMT

If a new packet(192.168.10.10 source ip from inside to outside) comes into a FWSM, which public ip address will be translated ?

FWSM(config)# static (inside,outside) 209.165.200.226 192.168.10.10 netmask 255.255.255.255

FWSM(config)# static (inside,outside) 209.165.200.232 192.168.10.0 netmask 255.255.255.248

Please tell me how will be working and a reason why

Re: two static nat order of operation

mattiaseriksson — Wed, 22 Aug 2007 11:23:21 GMT

Unless there is an existing xlate for that address, 192.168.10.10 should be translated to 209.165.200.226 because the order of operation between statics is first match wins.

Could you enter the commands without an error?

Re: two static nat order of operation

creamware — Thu, 23 Aug 2007 03:23:18 GMT

there was no error when i enter the commands.

is the order of operation matching first in a whole nat-static configuration? not loggest match ?

Re: two static nat order of operation

rajbhatt — Thu, 23 Aug 2007 04:35:54 GMT

Hi,

Why dont u verify the xlate .

Please issue the following command to check out

sh xl loc 192.168.10.10

In case there is already an existing translation for that we can use the following to clear the xlate table cl xl loc 192.168.10.10

and recheck it again

Raj