asa dmz and nat

[John Blakley]

All,

I'm setting up an ASA, and I have a question about nat translations.

If I have:

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

Will the above be sufficient to get internet access if I have 4 interfaces:

inside: 192.168.1.0

dmz1: 192.168.2.0

dmz2: 192.168.3.0

dmz3: 192.168.4.0

Or do I need to set up a pool for all of the dmz interfaces? I think the 1 global and 1 nat should work for all to go out as the interfaces address.

Thanks,

John

[acomiskey · Accepted solution]

You would also need....

nat (dmz1) 1 0.0.0.0 0.0.0.0

nat (dmz2) 1 0.0.0.0 0.0.0.0

nat (dmz3) 1 0.0.0.0 0.0.0.0

[John Blakley]

Thank you!