01-10-2019 08:22 PM - edited 02-21-2020 08:39 AM
Hello
Can someone enlighten me when to append no-proxy-arp route-lookup for the identity manual NAT/NAT Exempt for 9.9? Or is there a best practice for this?
01-10-2019 11:41 PM
Migrating from 8.2 to 9.9 is not an straight forward, you need to look upgrade path. ( i suggest to stick your latest OS with 5 Start rating, until you have rason to go 9.9)
there is lot of changes from 8.2 to 8.4, so i suggest to understand the chages and make the upgrade plan accordingly.
https://www.cisco.com/c/en/us/td/docs/security/asa/asa83/upgrading/migrating.html
01-10-2019 11:45 PM
Hi
Yes, actually i'm converting the pre8.3 to post8.4 nat configs line by line manually. I'm just confuse when to append the no-proxy-arp route-lookup for the post8.4 nat exempt
01-11-2019 12:48 AM
Hi,
For upgrading ASA from 8.2 to 9.9, you need to upgrade to 8.4 first.
Upgrade Path
Please go through the release note before upgrade, there are lot of changes from 8.2 to 9.9. For identity nat ASA not required to answer the arp quires.
HTH
Abheesh
01-11-2019 01:00 AM
Actually i will not do an upgrade, i will replace the 8.2 firewall with a 9.9 firewall that is why i am migrating the configuration manually. So for 9.9 NAT Exempt configuration, i need to append no-proxy-arp route-lookup?
01-11-2019 02:13 AM
01-11-2019 02:57 AM
01-11-2019 09:53 AM - edited 01-11-2019 09:54 AM
Hi,
Below doc can help you to understand more about proxy-arp, route-lookup are where to be used.
HTH
Abheesh
01-11-2019 10:03 AM
might this link could help/make your life bit easier to you convert the pre 8.3 to post 8.4 nat
https://www.tunnelsup.com/nat-converter/
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: