translation questions???

[Ibrahim Jamil]

Hi Experts

asa 5510 with 8.2 IOS

why we put the same ip when we try to coonect from inside to dmz?

ex:DMZ Server 50.50.50.50

Inside: 10.10.10.10

static (inside,dmz) 10.10.10.10 10.10.10.10

why not static (inside,dmz) 50.50.50.50 10.10.10.10?????????????????????

thanks

jamil

[syedmubarakahmed]

To keep the source IP unchanged

[Ibrahim Jamil]

hi Sayed

what is the benefits from that?

thanks

[Dan-Ciprian Cicioiu]

Hi Ibrahim,

There is no benefit.

This kind of nat is called also identity nat, and is used because of the pre 8.3 versions that have nat-control enabled,in order to bypass the nat requirement.

Dan

[Ibrahim Jamil]

Thanks

[Dan-Ciprian Cicioiu]

My pleasure, Ibrahim.

Dan