Cisco ASA 8.2 to 8.4 Migration

[shubhamkulkarni39]

Hello,

what are complications when migrating ASA 8.2 to 8.4, because i am facing some problems in NAT conversion when migrating.

ASA 8.2 : 

nat (outside) 0 access-list  nat-outside

nat (outside) 100 ip address subnet mask outside 

nat (inside) 0 access-list nat-inside 

nat (inside) 65535 ip address 

global (inside) 100 ip address 

global (outside) 65535 ip address 

static (inside,outside) mapped ip, real ip netmask 

static (inside,outside) mapped ip, real ip netmask 

static (inside,outside) mapped ip, real ip netmask 

static (inside,outside) mapped ip, real ip netmask 

static (inside,outside) mapped ip, real ip netmask 

static (inside,outside) mapped ip, real ip netmask  

ASA 8.4: 

after migration ASA migrate :

nat (outside,inside) source dynamic

nat (inside,outside) source static 

nat (outside,inside) source dynamic

nat (inside,outside) source static 

nat (outside,inside) source dynamic

nat (inside,outside) source static 

nat (outside,inside) source dynamic

nat (inside,outside) source static 

nat (outside,inside) source dynamic

nat (inside,outside) source static 

nat (outside,inside) source dynamic

nat (inside,outside) source static 

nat (outside,inside) source dynamic

nat (inside,outside) source static 

nat (outside,inside) source dynamic

nat (inside,outside) source static 

nat (outside,inside) source dynamic

nat (inside,any)

nat (inside,any)

nat (inside,any)

nat (inside,any)

nat (inside,any)

nat (inside,any)

nat (inside,any)

object network obj_any

nat (outside,inside) dynamic ip address 

Plz explain this : why ASA migrate static and dynamic nat in 8.4 ?

Thanks

[mickyq]

This document is very good for help with nat

https://supportforums.cisco.com/discussion/11769776/new-asa-83-nat-document

you can also check your nats here:

http://www.tunnelsup.com/nat-converter