cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1452
Views
5
Helpful
2
Replies

ASA double NAT

Hello,  I have my double nat config as below on an ASA.

object-group network inside-host
 network-object host 10.10.105.41

object network 1st-nat
 host 6.0.10.49

object network 2nd-nat
 host 206.125.46.2

nat (inside,outside) source static inside-host 1st-nat destination static 2nd-nat 2nd-nat

My question is - Can I add a new host 10.10.105.42 inside the 'inside-host' object group? How will react when it comes to natting with 1st-nat and 2nd-nat? 

Thanks. 

2 Replies 2

Pranay Prasoon
Level 3
Level 3

If you will do it, it will allow without any error. However it is a static NAT statement, so that both source IP should have different mapped address. Otherwise traffic coming to  6.0.10.49 will redirect to 10.10.105.41 but not 10.10.105.42

Thank you. 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card