Cisco Community
English
Register
JOIN US in congratulating September's Community Spotlight Awards Winners - Click HERE
Register
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

92
Views
0
Helpful
1
Replies
Highlighted
zhiqiang.yan
Beginner
Beginner
‎07-04-2014 02:42 PM
‎07-04-2014 02:42 PM

IP address in ACL when migrate from FWSM 4.x to ASASM 9.1

hi,

 

I am migrating from FWSM to ASASM. A question about the ACL migration. On my FWSM, I use the natted IP as destination in ACL. I know we will use the real IP on ASASM. But will the migration step can translate the whole ACL from natting IP to real IP in the new configure?

 

 

Thanks,

 

Ryan

Labels:
0 Helpful
1 REPLY 1
Highlighted
johflore
Beginner
Beginner
‎07-04-2014 04:01 PM
‎07-04-2014 04:01 PM

Hi,

 

Correct. ASASM should migrate automatically configuration about ACLs if there is NAT about it is pretty much because version and not model.

You can refer to NAT configuration format in following links:

https://supportforums.cisco.com/document/132066/asa-nat-83-nat-operation-and-configuration-format-cli

https://supportforums.cisco.com/docs/DOC-9129

And here are  Web-Based NAT Migration Tool to obtain the similar results about NAT upgrade:

http://www.packetbin.com/scripts/ciscoPix84NATGenerator/

http://www.tunnelsup.com/tup/2013/05/18/nat-converter/

 

Johan.

0 Helpful
Latest Contents
Cisco ASA 5515-X logging
Created by LovejitSingh1313 on 10-21-2020 01:57 PM
3
0
3
0
@Rob Ingram  @balaji.bandi  @Marius Gunnerud  Hi Guys, Does ASA saves any logs by default?  logs means if some sort suspicious activity happen within  network and we want to see what Firewall saw at that time.I... view more
Attackers Continue to Target Legacy Devices
Created by Omar Santos on 10-19-2020 09:20 PM
0
5
0
5
Attackers will always target the "low hanging fruit": devices that have passed end-of-software maintenance and end-of-support. A few years ago, Cisco described the evolution of attacks against infrastructure devices. All of the attacks discussed in t... view more
IBNS 2.0 - Built-In Templates for Auto Identity (AI) feature
Created by Arne Bier on 10-19-2020 04:22 PM
0
0
0
0
Hello   I somehow stumbled upon Cisco's IBNS 2.0 Auto Identity (AI) templates in my CML/VIRL IOSv layer2 image (IOS 15.2(6)).   I find these templates great, because these are the best practices that we tend to hard-code manually - e.g there are... view more
Cisco ISE Internal CA
Created by vsurresh on 10-19-2020 10:10 AM
6
0
6
0
Hello. Thanks in advance for any input. I have just spun up a Cisco ISE lab and having some issues with the certificates.  I created a self-signed certificate to be used with EAP and admin. DNS name of ise1.example.local points to the ... view more
How To: Agentless Posture Configuration, validation & Troubl...
Created by pavagupt on 10-15-2020 05:08 AM
0
0
0
0
Introduction Cisco Identity Services Engine (ISE) gives you intelligent Integrated protection through intent-based policy and compliance solution. Cisco ISE supports posturing of endpoints with different Anyconnect deployment methods so far. With increas... view more
Content for Community-Ad