8.4 nat (any,any) question

[JEFF SPRADLING]

why would using the following statement:

nat 1 (any, any) source static obj_10.30.0.0 obj_10.30.0.0 destination static obj_172.16.1.0 obj_172.16.1.0

cause hosts in the 10.30.0.0 network to lose their static NAT to the outside world when not talking to the 172.16.1.0 network?

[Jouni Forss]

Hi,

I cant give you an 100% detailed answer on this BUT I would say its not a very good idea to use the term/parameter "any" in NAT configuration.

It would seem to me that you have configured some NAT0 / Identity NAT type configuration. In that case there is no need for it to specify the interfaces as "any" / "any". You should always configure them like "inside" / "outside" if that is your setup. There is no real reason to use "any" here.

Naturally if you can share "packet-tracer" command output while testing the Static NAT configurations I might be able to say more about your situation.

The general format for the command is

packet-tracer input

- Jouni