cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
786
Views
0
Helpful
2
Replies

nat from inside to dmz using 8.4

mburguk1000
Level 1
Level 1

                   I need to configure nat from inside to dmz, i have already configured one network object and now need to apply static nat from inside tor dmz

It seems that you have to apply when the network object is being created but I am confused to how you amended Nat to the object after creation

The nat command i believe is nat (inside,dmz) static object_name

Any help would be greatly appreciated

2 Replies 2

Julio Carvajal
VIP Alumni
VIP Alumni

Hello,

Actually there are 3 different ways to configure NAT on 8.3 or higher versions. Right now you are refering to the auto-nat but at least my opinion is to go with the Twice nat at this is the first taken into consideration by the ASA

Do the following

nat (inside,dmz) source static Real-IP_Object Mapped_Ip_Object

Any other question..Sure.. Just remember to rate all of my posts

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

lcambron
Level 3
Level 3

Hello,

If you still want to use auto-nat, it is as follows:

******create the object*******

object network Real-IP

host 1.1.1.1

***** enter the object subcommand mode and add the nat rule********

object network Real-IP

nat (inside,dmz) static mapped-IP  

After the static keyword, you can use an IP address, network object or the interface keyword.

Note: NAT for traffic between interfaces is no longer a requirement after version 8.3

Regards,

Felipe

Review Cisco Networking for a $25 gift card