Nat understanding

[opnineopnine]

Hi all.

I have the following nat configuration 

!

name 10.168.100.12 other
name 181.10.147.22 other_Public

!

1.- global (outside) 2 other_Public netmask 255.255.255.0
!
2.- access-list outside_access_in extended permit tcp any host other_Public eq www 
!
3.- static (inside,outside) tcp other_Public www other www netmask 255.255.255.255

!

I tried to access the ip 181.10.147.22, and it will open www to the ip 10.168.100.12. I see hitcnt on the acl

My question will be do I still need the global (outside) configuration? 

Thanks. 

[Karsten Iwen · Accepted solution]

"static" is the command for static translations that can be used for outside->inside traffic. For that the global is not needed.

A global always corresponds to a "nat" statement for dynamic outgoing connections. You probably need that for all the other systems, but not for the mentioned connection.

More on NAT can be found in the config-guide.