ASA 5525-X

[mzoricbg1]

Hi, I have a question about ASA 5525-X. Can this ASA be used to dynamically PAT one IP subnet of private IP addresses (from inside port to outside port) and in the same time just to route other IP subnet of public IP addresses without PAT?

I would have a public IP address on outside interface. And another public IP subnet on inside part of the network.

[Marvin Rhoads]

Sure, that's frequently done with ASAs going back many years.

You can either:

a. exempt the inside public addresses and dynamically PAT all remaining (private) addresses, or b. setup a single object NAT policy for only the private IP addresses you want to match on, leaving the others untranslated.