ASA5505 NAT Exempt.

[mdavis]

I currenty have a pix and would like to import some of the commands over but I am having a hard time with converting this nat rule. How would this nat rule be implemented on an ASA.

nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) 10.199.0.0 10.199.0.0 netmask 255.255.0.0 0 0
access-group any in interface outside

Any help will be greatly appreciated.

[Jennifer Halim]

I assume that you are running ASA version 8.3, hence the commands difference.

For the following statement:

static (inside,outside) 10.199.0.0 10.199.0.0 netmask 255.255.0.0 0 0

The corresponding ASA 8.3 command is:

object network obj-10.199.0.0

     subnet 10.199.0.0 255.255.0.0

     nat (inside,outside) source static obj-10.199.0.0

For "nat (inside) 1 0.0.0.0 0.0.0.0 0 0", if I assume that you have the following "global (outside) 1 interface", the corresponding 8.3 command is:

object network obj-inside

     subnet 0.0.0.0 0.0.0.0

     nat (inside,outside) dynamic interface

The "access-group" command is the same in version 8.3.

Hope that helps.