ASA NAT

[SathishkumarSaravanan0348]

Hello Experts,

In ASA new request came to create the NAT as per below. Whether the below NAT is correct? Because after interface there is no interface type. IS this is the static NAT?

ASA 

object network obj-10.243.216.128

subnet 10.243.216.128 255.255.255.128

!

nat (inside,outside) source dynamic obj-10.243.216.128 interface

Regards,

Sathish

[jj27]

That is not a static NAT. It is a dynamic NAT that will hide the entire subnet behind whatever your "outside" interface IP address is configured as.

[SathishkumarSaravanan0348]

Thanks. so after the interface there should be "outside" right?

[jj27]

No you do not need to define it. The syntax you provided above is correct.

The interface "outside" is implied since it is defined in the nat (inside,outside) statement.

[Deepak Kumar]

Hi,

It is not a static NAT. It is a dynamic NAT from Inside to outside. 

For static NAT, Visit at:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/nat_static.html

This is for ASA 8.2 so it may change as your ASA version.