Hello everybody,
i am so confused about the new changes from de command lines in ASA ver 7.2 to 8.6
in some cases i've found some tools to translate NAT, for example:
global (outside) 1 interface
nat (inside) 0 access-list NONAT
nat (inside) 1 0.0.0.0 0.0.0.0
where the new command line is:
object network obj-any_inside-outside
subnet 0.0.0.0 0.0.0.0
nat (inside,outside) dynamic interface
I think that is ok, but there is not showed how to apply the ACL
access-list NONAT extended permit ip interface outside 172.16.xxx.xxx 255.255.255.224
access-list NONAT extended permit ip 172.16.xxx.xxx 255.255.255.0 10.166.xxx.xxx 255.255.255.0
access-list NONAT extended permit ip object-group OG-MY_INTERNAL_NETWORK 10.161.xxx.0 255.255.252.0
in other lines this is the old config
static (inside,outside) 10.75.5.75 access-list MY-ACL
access-list MY-ACL extended permit ip host 10.161.xxx.xxx host 172.20.xxx.xxx
i have read some links, but i really cannot clarify how can accomodate these lines to the new version
Can you help me?
i appreciate any help to resolve this change in the configuration on the new version
Thanks in Advance
Rolando Gutierrez
