FWSM to ASA config migration issue

[S891]

Hi,

I am moving FWSM 4.1(15) config to ASA 9.2. I have some specific static natting on FWSM where I have both static (inside,outside) and static (inside,inside) for the same set of internal and external address. It is working fine with the 'alias' for my requirement. 

However, when I migrate the config to ASA the object network only allows one nat statement., either nat (INSIDE,INSIDE) OR nat (INSIDE,OUTSIDE) but not two statements. 

Does anyone have experience with this kind of config on ASA 8.3 or later versions. 

FWSM config:

static (INSIDE,OUTSIDE) 96.3.37.132 172.20.48.243 netmask 255.255.255.255

static (INSIDE,INSIDE)     96.3.37.132 172.20.48.243 netmask 255.255.255.255

ASA config:

object network obj-172.20.48.243

 nat (INSIDE,INSIDE) static 96.3.37.132

[Vibhor Amrodia]

Hi,

You can easily create another object with a different name but same Host Ip and create the NAT statement.

Each object needs to have a unique IP address and cannot have two or more non consecutive IP's.

object network obj-172.20.48.243
host 172.20.48.243
 nat (INSIDE,INSIDE) static 96.3.37.132

object network obj-172.20.48.243-1
host 172.20.48.243
 nat (INSIDE,OUTSIDE) static 96.3.37.132

Thanks and Regards,

Vibhor Amrodia