Object-Group NAT Dynamic PAT

[mumbles202]

Is there any issue w/ the following configuration:

object-group network obj_myinternal_ips
  network-object host 172.16.23.20
  network-objecthost 172.16.23.100

object network obj_myexternal 

  network-object host 192.168.23.200

nat (inside,outside) source dynamic obj_myinternal_ips obj_myexternal

where obj_myexternal is a public ip on the outside interface other than the interface ip?

[Rob Ingram · Accepted solution]

Hi,
Yes that will work fine, those 2 IP addresses will be natted behind 192.168.23.200.
Obviously you need a space between object-group and host, but I'm guessing that's a typo.

HTH

[mumbles202]

Thanks for the reply. Yes, that was a typo.  I applied the configuration using 2 object-groups but otherwise the same as posted so I'll check if any issues today.