ASA NAT Statement Best Practice

[magates]

I will be setting up a VPN that requires static NAT for roughly 200 hosts, and each host must always use the same translated address. This is on an ASA 5525X running 9.6(4)3

My first thought is, for each host, create a network object with the local address and another network object with the translated address, and then create the appropriate NAT rule using those objects. But this seems very inefficient and will result in a lot of configuration clutter.

Is there a cleaner, more efficient way to approach this?

[Florin Barhala]

Had a quick look over the 9.6 NAT guide but I couldn't find any hint.
Let's see what other suggest about this.

[Bogdan Nita]

Starting with version 8.3 you can't configure nat without configuring some object groups as well, so there is no cleaner version available, but I find that if the object have meaningful names the nat config remains readable.

Not sure if that is the case, but if you are planning to nat a range of IPs to a range of IPs you could have only one NAT rule in place.

HTH

Bogdan