Basic question about Nat

[louis0001]

Hi,

very basic question about nat.

If I have an ASA with the following:

OUTSIDE = 10.1.1.1    >>>> connects to another ASA 10.1.1.2

INSIDE = 192.168.1.1/24

The inside subnet has 2 web servers (192.168.1.100:80 & 192.168.1.101:81)

Do I have to use NAT for:

1. The inside servers to reach the other ASA 10.1.1.2

2. The other ASA 10.1.1.2 to be able to reach the web servers on 192.168.1.100:80 & 192.168.1.101:81?

[saif musa]

Louis,

Any connectivity between two different IPs ( 192.168.1.0/24 & 10.0.0/8 ) for example. Needs to be pass through network address translation process ( NAT ). It just as you talking in English and needs to communicate with arabic native language people. You will need for someone to translate.

Hope that helps

Regards

[louis0001]

Hi, thanks for reply.

Just to confirm. Nat is needed even if the addresses are private ip's?

So in the above example, I have multiple web servers (192.168.1.0/24) going to another private network (10.1.2.0/24)

So I would need a dynamic NAT rule for the outgoing and 2 static NAT rules for the incoming as the outside ip of ASA 1 (10.1.1.1) only has 1 ip address

I was always under the illusion that nat was needed to translate private ip's to public ip's and vice versa only which is probably down to me doing this to the internet only rather than another private network

[Marius Gunnerud]

Do I have to use NAT for:

1. The inside servers to reach the other ASA 10.1.1.2

Depending on your ASA version and how it is configured, no you do not need NAT.  If you are running version 8.2 or earlier make sure that NAT control is turned off and then you will not need to use NAT.  If it is turned on, then you will need to use NAT.  In version 8.3 and higher NAT control has been removed.

2. The other ASA 10.1.1.2 to be able to reach the web servers on 192.168.1.100:80 & 192.168.1.101:81?

See answer to question 1.

--

Please remember to select a correct answer and rate helpful posts