cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


295
Views
5
Helpful
2
Replies

ASA double NAT

Hello,  I have my double nat config as below on an ASA.

object-group network inside-host
 network-object host 10.10.105.41

object network 1st-nat
 host 6.0.10.49

object network 2nd-nat
 host 206.125.46.2

nat (inside,outside) source static inside-host 1st-nat destination static 2nd-nat 2nd-nat

My question is - Can I add a new host 10.10.105.42 inside the 'inside-host' object group? How will react when it comes to natting with 1st-nat and 2nd-nat? 

Thanks. 

2 REPLIES 2
Participant

If you will do it, it will

If you will do it, it will allow without any error. However it is a static NAT statement, so that both source IP should have different mapped address. Otherwise traffic coming to  6.0.10.49 will redirect to 10.10.105.41 but not 10.10.105.42

Highlighted

Thank you. 

Thank you.