cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
717
Views
0
Helpful
1
Replies

ASA 8.2 config need to convert to 8.3 +

taurusadnan
Level 1
Level 1

i need help to migrate my old asa ios 8.2 config to new ios 8.4

static (Inside,Outside) 192.168.240.x  access-list Inside_nat

access-list Inside_nat extended permit ip host 10.0.6.x object-group INLINE_NETWORK

object-group network INLINE_NETWORK

network-object host 1.1.1.1

network-object host 2.2.2.2

which one is  right below

object-group network inline network

network-object host 1.1.1.1

network-object host 2.2.2.2

NAT (Inside,Outside) static 192.168.240.x

or

object-group network inline network

network-object host 192.168.240.x

NAT (Inside,Outside) static 1.1.1.1

NAT (Inside,Outside) static 2.2.2.2

thanks for your help.

1 Accepted Solution

Accepted Solutions

Jouni Forss
VIP Alumni
VIP Alumni

Hi,

So the original 8.2 NAT configuration is this

object-group network INLINE_NETWORK

network-object host 1.1.1.1

network-object host 2.2.2.2

access-list Inside_nat extended permit ip host 10.0.6.x object-group INLINE_NETWORK

static (Inside,Outside) 192.168.240.x  access-list Inside_nat

And the new 8.3+ NAT configuration would be this

object network DESTINATION

network-object host 1.1.1.1

network-object host 2.2.2.2

object network SOURCE-REAL

host 10.0.6.x

object network SOURCE-MAPPED

host 192.168.240.x

nat (Inside,Outside) source static SOURCE-REAL SOURCE-MAPPED destination static DESTINATION DESTINATION

Hope this helps

Please remember to mark the reply as the correct answer if it answered your question.

- Jouni

View solution in original post

1 Reply 1

Jouni Forss
VIP Alumni
VIP Alumni

Hi,

So the original 8.2 NAT configuration is this

object-group network INLINE_NETWORK

network-object host 1.1.1.1

network-object host 2.2.2.2

access-list Inside_nat extended permit ip host 10.0.6.x object-group INLINE_NETWORK

static (Inside,Outside) 192.168.240.x  access-list Inside_nat

And the new 8.3+ NAT configuration would be this

object network DESTINATION

network-object host 1.1.1.1

network-object host 2.2.2.2

object network SOURCE-REAL

host 10.0.6.x

object network SOURCE-MAPPED

host 192.168.240.x

nat (Inside,Outside) source static SOURCE-REAL SOURCE-MAPPED destination static DESTINATION DESTINATION

Hope this helps

Please remember to mark the reply as the correct answer if it answered your question.

- Jouni

Review Cisco Networking for a $25 gift card