Hi ,
Basically we have 3 modes of NAT on this new version: AUTO-NAT , MANUAL NAT and AFTER AUTO NAT.
They have different priority on the ASA
Here are some examples :
Auto-NAT
1.Create the object to identify the IP
Object network webserver
Host 192.168.1.88
2.Create the NAT entry inside the object
Syntaxis
NAT (int name , int name) # source static/dynamic (object name source ) (object name destination )
Object network my_internal_net
Subnet 192.168.10.0 255.255.255.0
Nat (in,out) 2 source dynamic (object name )
Example of Dynamic-PAT
Object network inside-hosts
Subnet 192.168.1.0 255.255.255.0
Nat (in,out) 1 source dynamic interface
Static NAT to ANY
Object network inside-server
Host 192.168.1.99
Object network inside-server-global
Host 14.36.103.222
Nat (inside,any) static inside-server inside-server-global
Manual NAT with NAT 0
It’s created in the global mode, not inside an object
object network inside-net
subnet 192.168.1.0 255.255.255.0
object network VPNhosts
subnet 10.10.1.0 255.255.255.0
Nat (inside,outside) source dynamic inside-net interface destination static VPNhost VPNhost
AFTER-AUTO
Just add the keyword after-out to the sentence.
NAT (any,out) after-auto 1 source dynamic net_in net_out
Hope this help!
Regards ,
