NAT command conversion from PIX 6.3 to ASA 5510

[HNIN LEI SOE]

Hello,

Please someone help me to convert below PIX 6.3 NAT command to ASA.

interface ethernet0 auto
interface ethernet1 auto
nameif ethernet0 outside security0
nameif ethernet1 inside security100

static (inside,outside) 10.164.3.3 10.164.3.3 netmask 255.255.255.255

Thanks.

[Marius Gunnerud]

You are just NATing the IP to itself here.  is this for a VPN connection?

In PIX you were forced to NAT unless you disable NAT control.  NAT control is no longer an issue you need to consider, so traffic will pass through the ASA with out needing to have a NAT statement.

Now, if you have a dynamic NAT on the outside interface for internet traffic and this traffic is going towards a network over a VPN then you need to have an identity NAT configured.  But before we get into that we should identify what you are trying to do with this NAT statement first.

--

Please remember to select a correct answer and rate helpful posts

[HNIN LEI SOE]

Hello Marius,

I don't know exactly the meaning of pix configuration which was my senior implemented who left already. But now I have to migrate the current PIX config to the new ASA 5510. the problem is Nat commands are different between PIX 6.3 to ASA 5510. Please help me how to convert this command from PIX 6.3 "static (inside,outside) 10.164.3.3 10.164.3.3 netmask 255.255.255.255 "that was unable to type on ASA. other settings are work well.

Thanks.

[Marius Gunnerud]

You can convert it to:

object network <objectname>

  host 10.164.3.3

  nat (inside,outside) static 10.1.164.3.3

I suggest you learn more about the setup, as configuring a firewall incorrectly is a security risk.

--

Please remember to select a correct answer and rate helpful posts

[HNIN LEI SOE]

Hello Marius,

Thank you very much for your answer and advise :).