nat (DMZ,outside) source dynamic any interface

[mahesh18]

Hi Everyone,

Need to confirm NAT  statement below

nat (DMZ,outside) source dynamic any interface   in version 9.1.

So above line means NAT from  DMZ  to outside.

Need to know  that source here means that we are NATing IP from DMZ?

any interface means NAT IP will be of outside interface IP?

Regards

MAhesh

[Jouni Forss · Accepted solution]

Hi Mahesh,

The below NAT configuration

nat (DMZ,outside) source dynamic any interface

Means the following

• The NAT configuration is for connection between "DMZ" and "outside".  Basicly for connection FROM "DMZ" to "outside"
  
• The translation is a "dynamic" translation
• It accepts "any" source address from behind the "DMZ" interface
• It uses the "outside" "interface" IP address as the PAT address

So its a basic Dynamic PAT translations for the hosts behind "DMZ" interface and accepts any source address/network you might have behind "DMZ"

- Jouni

[mahesh18]

Thanks Again

Regards

MAhesh