01-18-2017 08:12 AM - edited 03-12-2019 01:47 AM
Hello, I have my double nat config as below on an ASA.
object-group network inside-host
network-object host 10.10.105.41
object network 1st-nat
host 6.0.10.49
object network 2nd-nat
host 206.125.46.2
nat (inside,outside) source static inside-host 1st-nat destination static 2nd-nat 2nd-nat
My question is - Can I add a new host 10.10.105.42 inside the 'inside-host' object group? How will react when it comes to natting with 1st-nat and 2nd-nat?
Thanks.
01-18-2017 08:26 AM
If you will do it, it will allow without any error. However it is a static NAT statement, so that both source IP should have different mapped address. Otherwise traffic coming to 6.0.10.49 will redirect to 10.10.105.41 but not 10.10.105.42
01-18-2017 08:29 AM
Thank you.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide