04-24-2012 09:55 AM - edited 03-11-2019 03:57 PM
I have looked over the documentation for the ASA 8.3 migration and there is still something I have not been able to determine.
The page http://www.cisco.com/en/US/docs/security/asa/asa83/upgrading/migrating.pdf states that "Static identity NAT is treated like any other static command, and is converted depending on whether it is regular or policy NAT"
For static identity nats, I assume that means that the auto-migration tool should convert this:
static (inside,outside) 10.1.1.6 10.1.1.6 netmask 255.255.255.255
to this:
object network obj-10.1.1.6
host 10.1.1.6
nat (inside,outside) static 10.1.1.6
***However***, will it also automatically convert this
static (inside,outside) 10.1.1.0 10.1.1.0 netmask 255.255.255.0
to this? :
object network obj-10.1.1.0
network 10.1.1.0 255.255.255.0
nat (inside,outside) static 10.1.1.0 255.255.255.0
and will it work the same way?
Thanks,
-Mathew
Solved! Go to Solution.
04-25-2012 12:41 AM
Hi Mat,
Yes that's right, you've got the correct nat translations after upgrading.
You can refer to this doc as well:
https://supportforums.cisco.com/docs/DOC-9129#comment-3934
Hope that helps,
Thanks,
Varun
04-25-2012 12:41 AM
Hi Mat,
Yes that's right, you've got the correct nat translations after upgrading.
You can refer to this doc as well:
https://supportforums.cisco.com/docs/DOC-9129#comment-3934
Hope that helps,
Thanks,
Varun
04-25-2012 05:53 AM
Thanks for the answer and the link.
-Mathew
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide