cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
360
Views
0
Helpful
2
Replies
Highlighted
Beginner

Can you have multiple nat (real,mapped) entries

I have been looking to see if under the new code versions we can do multiple definitions of the NAT like to old multiple global statements.

Old method

nat (inside) 1 10.1.0.0 255.255.255.0

global (outside) 1 192.168.1.3

global (dmz) 1 172.16.4.4

will this work under the new code

object-network net-10.1.0.0

     subnet 10.1.0.0 255.255.255.0

     nat(inside,outside) dynamic 192.168.1.3

     nat(inside,dmz) dynamic 172.16.4.4

instead of having to do a separate object definition for the same network with different nat statement.

Thank you for your assistance.  

Rich

Everyone's tags (6)
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Participant

Can you have multiple nat (real,mapped) entries

Hello Rich,

This is not possible because the second nat statement will overwrite the first one.

You need two different object names

object-network net-10.1.0.0

     subnet 10.1.0.0 255.255.255.0

     nat(inside,outside) dynamic 192.168.1.3

object-network net-10.1.0.0-2

     subnet 10.1.0.0 255.255.255.0

     nat(inside,dmz) dynamic 172.16.4.4

Regards,

Felipe

View solution in original post

2 REPLIES 2
Highlighted
Participant

Can you have multiple nat (real,mapped) entries

Hello Rich,

This is not possible because the second nat statement will overwrite the first one.

You need two different object names

object-network net-10.1.0.0

     subnet 10.1.0.0 255.255.255.0

     nat(inside,outside) dynamic 192.168.1.3

object-network net-10.1.0.0-2

     subnet 10.1.0.0 255.255.255.0

     nat(inside,dmz) dynamic 172.16.4.4

Regards,

Felipe

View solution in original post

Highlighted
Beginner

Can you have multiple nat (real,mapped) entries

Thank You for the quick response.  Thought it might have been something like that but wanted to get confirmation.