NAT Command Question

[Tang-Suan Tan]

Hi all :

I have below question that :

There is existing one subnet 192.168.1.0 subnet at the Inside Network. My customer wants another subnet 192.168.2.0 created in this Inside Network. Existing there is NAT command for this 192.168.1.0 subnet as below :

ASA5505(config)# global (outside) 10 interface

ASA5505(config)# nat (inside) 10 192.168.1.0 255.255.255.0

If I want to add this 192.168.2.x network in NAT, can I add the command as below in Bold?

ASA5505(config)# global (outside) 10 interface

ASA5505(config)# nat (inside) 10 192.168.1.0 255.255.255.0

ASA5505(config)# global (outside) 10 interface

ASA5505(config)# nat (inside) 10 192.168.2.0 255.255.255.0

or

ASA5505(config)# global (outside) 11 interface

ASA5505(config)# nat (inside) 11 192.168.2.0 255.255.255.0

The first one is still using 10 but the second one is used a new 11. Which one is correct or all are wrong and there is another way to do it, plaese advise. Thanks!

Best regards,

TangSuan

[varrao · Accepted solution]

Hi Tang-Suan,

You just need one command to the existing nat stataments:

ASA5505(config)# global (outside) 10 interface

ASA5505(config)# nat (inside) 10 192.168.1.0 255.255.255.0

ASA5505(config)# nat (inside) 10 192.168.2.0 255.255.255.0

Thats's all you would need, nothing else.

Thanks,

Varun

[Tang-Suan Tan]

Hi Varun :

Thanks for your reply!

I will do it and let you know if I still have problem. Thanks!