cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
599
Views
0
Helpful
2
Replies

nat from inside to dmz using 8.4

mburguk1000
Beginner
Beginner

                   I need to configure nat from inside to dmz, i have already configured one network object and now need to apply static nat from inside tor dmz

It seems that you have to apply when the network object is being created but I am confused to how you amended Nat to the object after creation

The nat command i believe is nat (inside,dmz) static object_name

Any help would be greatly appreciated

2 Replies 2

Julio Carvajal
Advisor
Advisor

Hello,

Actually there are 3 different ways to configure NAT on 8.3 or higher versions. Right now you are refering to the auto-nat but at least my opinion is to go with the Twice nat at this is the first taken into consideration by the ASA

Do the following

nat (inside,dmz) source static Real-IP_Object Mapped_Ip_Object

Any other question..Sure.. Just remember to rate all of my posts

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

lcambron
Participant
Participant

Hello,

If you still want to use auto-nat, it is as follows:

******create the object*******

object network Real-IP

host 1.1.1.1

***** enter the object subcommand mode and add the nat rule********

object network Real-IP

nat (inside,dmz) static mapped-IP  

After the static keyword, you can use an IP address, network object or the interface keyword.

Note: NAT for traffic between interfaces is no longer a requirement after version 8.3

Regards,

Felipe

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers