Global PAT

[SHSCITHelpdesk]

Hi All, i am currently replacing a PIX firewall with an ASA 9.5(1).

I have configured the access rules but i am unsure on the best way of configuring PAT on the external interface, which is automatic on the PIX.

I have created a container containing our 2 aggregated IP address ranges which are a /19 and a /20 subnet but testing has been unsuccessful.

When testing external access rules I can only connect if I create an object for the individual PC I am using and NAT (PAT Hide) that to the external interface.

I have tried doing the same thing using a network object for the local subnet the PC is on but this has also proved unsuccessful.

I can create an access rule for a group of individual (nat/pat hide) PCs but I would prefer to use PAT.

Any help appreciated.

Pete

[Jon Are Endrerud]

1. Can you do a "sh run" and dump the config here?

2. Have you tried to run the "packet tracer" ?, see whats happening ?

[Collin Clark]

Here is how I do it-

object network obj_any
 subnet 0.0.0.0 0.0.0.0

object network obj_any
 nat (any,outside) dynamic interface

HTH