Re: ASA NAT Statements

RyanB · ‎01-25-2018

I have a configuration as follows.

object network INSIDE_NET
  subnet 192.168.1.0 255.255.255.0
  nat (any,outside) dynamic interface

My question is basically, is there any point to saying "any" on the source interface when the NAT is contained within the INSIDE_NET object? Would it not make more sense (or at least be the exact same) as this configuration?

object network INSIDE_NET
  subnet 192.168.1.0 255.255.255.0
  nat (inside,outside) dynamic interface

Im pretty much just trying to determine if there is any possible reason why ANY was specified instead of the INSIDE interface.

Thanks

jtattenbach · ‎01-25-2018

Is there "ANY" the nameif of some of your configured interfaces in the ASA?

RyanB · ‎01-25-2018

No, "any" would not be the nameif of any interfaces.

They would be something like:

inside

outside

dmz

Also, if you tried to name an interface "any", you would get an error.

ERROR: Name "any" is a reserved word and cant be used here