SNAT to single host using object-group service

[Samuel Eng]

Hi, I have a single host that I want to static nat a number of services to. I want to use service object groups to simplify commands. I guess the beginnig is:

object-group service OG-SERVICES-INSIDE-MYSERVER
 service-object tcp destination eq ftp
 service-object tcp-udp destination eq www
 service-object tcp destination eq 1723

object network NETWORK_OBJ_INSIDE-MYSERVER
 host 192.168.1.100

How would the NAT configuration be?

[Rishabh Seth]

Hi Samuel,

I think object NAT does not allow us to use service object-group. 

In order to achieve your requirement we need to create network object per static nat per service.

This is because there can be only one nat statement per network object.

Hope this helps.

Thanks,

Rishabh