Cisco ASA NAT Clarification

[ravindra962]

Hello Guys

I am getting a little confused with NAT's. Please help me understand it Correctly

In the ASA Code before 9, when we have a Static NAT for an Internal IP, your ACL should have the NAT IP as destination to allow traffic from a Client to that IP address. The traffic is allowed through the ACL and then NAT is applied.

In the ASA code after 9. when we have a Static NAT for an Internal IP, your ACL should have the Internal IP as destination to allow traffic from a Client to that IP address. The NAT is applied first and the traffic is allowed through the ACL.

Please correct me if I am wrong.

Thanks

Ravi

[Rob Ingram]

Hi,
Yes, in ASA 9.x you would specify the real/private IP address and port, not the NATTED IP address/port.

HTH