cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
368
Views
0
Helpful
1
Replies

NAT on PIX 6.3 to ASA 9.2

matthewatt
Level 1
Level 1

I've got an old PIX running 6.3 code. Finally upgrading to an ASA 5515 running 9.2 code. I can't keep up with all the NAT changes that have taken place through the years. I have several of basically no nat statements on the PIX, like below:

 

static (inside,Lab) 172.16.128.100 172.16.128.100 netmask 255.255.255.255

static (inside,Lab) 172.16.128.101 172.16.128.101 netmask 255.255.255.255

static (inside,Lab) 172.16.128.102 172.16.128.102 netmask 255.255.255.255

 

When configuring the ASA, do I need any statements at all to account for this "no nat", does the ASA simply not nat by default, or do I need explicit no nat statements? If I need a statement, can I get an example of what one of mine would look like? Thank you in advance

1 Reply 1

Maykol Rojas
Cisco Employee
Cisco Employee

The reason why you used to do that on the old pix was due to "Nat-control" which basically forced you to have a NAT statement for everyplace you went. 

 

After version 7.2, NAT-control is disabled and those NATs are not needed anymore. In version 9.2 is the same thing, if you do not have those nat statements configured, by default it will use its own address without the need for the NAT statement. 

 

Hope this makes sense. 

 

Mike. 

Mike
Review Cisco Networking for a $25 gift card