Can we use Static NAT with Object-group in ASA IOS Version 9.6(2)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-27-2017 02:03 AM - edited 03-12-2019 02:17 AM
Can we use Static NAT with "Object-group" in ASA IOS Version 9.6(2) or we can only use "object" for ASA IOS Version 9.6(2).
When we are using below mentioned NAT Configuration, traffic for internal network is redirecting to egress interface and not to the internal interface We are not able to access internal server, but when we use "Object" in place of "Object-group" in configuration, internal traffic is not being getting NAT and is being directly transfer through route map, which we actually want but not able to achieve by "object-group". Is there any way to access this through "Object-Group" instead of "Object". Can we use Object-group?
object-group network Private-IP
network-object host X.X.X.X
object-group network Public-IP
network-object A.B.C.D 255.255.255.255
object-group network Private-IP
nat (Ingress,egress) source static Private-IP Public-IP destination static Internet Internet no-proxy-arp
Million Thanks
- Labels:
-
NGFW Firewalls

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-28-2017 06:39 AM
Hi shishirhemant108,
Yes, you can use both object or object-group in NAT
Do you mean that you are not able to access internal server defined in "object-group network Private-IP" when you are trying to access from egress interface?
