Iam trying to config a PAT on ASA5506 for my network (Labo CCNA) .
Finally PAT rules is not applied on packets, its forwarded without any change.
you can find attached running-config of ASA5506.
FW#show running-config : Saved : ASA Version 9.6(1) ! hostname FW domain-name wr enable password J.WhuVJ1RokggMhD encrypted names ! interface GigabitEthernet1/1 nameif insider2 security-level 100 ip address 10.0.0.10 255.255.255.252 ! interface GigabitEthernet1/2 description Link to R1 nameif insider1 security-level 100 ip address 10.0.0.14 255.255.255.252 ! interface GigabitEthernet1/3 no nameif no security-level no ip address shutdown ! interface GigabitEthernet1/4 no nameif no security-level no ip address shutdown ! interface GigabitEthernet1/5 no nameif no security-level no ip address shutdown ! interface GigabitEthernet1/6 no nameif no security-level no ip address shutdown ! interface GigabitEthernet1/7 no nameif no security-level no ip address shutdown ! interface GigabitEthernet1/8 nameif outside security-level 0 ip address 209.165.201.1 255.255.255.252 ! interface Management1/1 management-only no nameif no security-level no ip address shutdown ! object network VLAN10 subnet 192.168.1.0 255.255.255.0 nat (insider1,outside) dynamic interface object network VLAN20 subnet 192.168.2.0 255.255.255.0 nat (insider1,outside) dynamic interface object network VLAN30 subnet 192.168.3.0 255.255.255.0 nat (insider1,outside) dynamic interface ! route outside 0.0.0.0 0.0.0.0 209.165.201.2 1 ! access-list OutSide-Access extended permit tcp any any access-list OutSide-Access extended permit icmp any any ! ! access-group OutSide-Access in interface Outside ! ! class-map inspection_default match default-inspection-traffic ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect icmp inspect tftp ! service-policy global_policy global ! telnet timeout 5 ssh timeout 5 ! ! ! ! router ospf 10 router-id 3.3.3.3 log-adjacency-changes network 10.0.0.20 255.255.255.252 area 0 network 10.0.0.8 255.255.255.252 area 0 network 10.0.0.12 255.255.255.252 area 0 !
