Trying to us object-group and PAT

[weichenb2]

I am trying to configure dynamic PAT on a Cisco ASA 5510 using an object-group and having difficulty.

How can I use an object-group, which includes five subnets, as a source for NATing to a dynamic PAT address?

[Julio Carvajal · Accepted solution]

Hello,

Okay so you already created the object-group ( Let's say it's called internal_subnets)

So nat should be :

nat (inside,outside) source dynamic internal_subnets interface

In the last example it will get patted to the outside interface, if you want to PAT it to a different IP than the outside interface just create a object network host and use it on the NAT instead of the interface keyword,

Regards,

Julio

[weichenb2]

Should the "nat (inside,outside) source dynamic internal_subnets interface" command be under the object-group?

[Julio Carvajal · Accepted solution]

Hello,

No, that command is for twice NAT not auto-nat ( object_nat)

Julio

[weichenb2]

Does "twice NAT" mean two-way NAT?

[Julio Carvajal · Accepted solution]

Hello,

That is just the name  ( and yes they used that name because of that) but it can also be used on a singular nat ( I mean no use of the destination keyword)