Can you have multiple nat (real,mapped) entries

[frabonir]

I have been looking to see if under the new code versions we can do multiple definitions of the NAT like to old multiple global statements.

Old method

nat (inside) 1 10.1.0.0 255.255.255.0

global (outside) 1 192.168.1.3

global (dmz) 1 172.16.4.4

will this work under the new code

object-network net-10.1.0.0

     subnet 10.1.0.0 255.255.255.0

     nat(inside,outside) dynamic 192.168.1.3

     nat(inside,dmz) dynamic 172.16.4.4

instead of having to do a separate object definition for the same network with different nat statement.

Thank you for your assistance.  

Rich

[lcambron · Accepted solution]

Hello Rich,

This is not possible because the second nat statement will overwrite the first one.

You need two different object names

object-network net-10.1.0.0

     subnet 10.1.0.0 255.255.255.0

     nat(inside,outside) dynamic 192.168.1.3

object-network net-10.1.0.0-2

     subnet 10.1.0.0 255.255.255.0

     nat(inside,dmz) dynamic 172.16.4.4

Regards,

Felipe

[frabonir]

Thank You for the quick response.  Thought it might have been something like that but wanted to get confirmation.