ASA NAT Clarification

[ayojosh2k]

Hello All

Please i need to be clear on a point:

is

static(inside,outside) 10.10.10.1 11.11.11.1 netmask 255.255.255.0

the same as

static(outside,inside) 11.11.11.1 10.10.10.1 netmask 255.255.255.0????

[beavis9663 · Accepted solution]

No, they are not same.  The order of a static NAT is:

static (real_interface,mapped_interface) mapped_ip real_ip netmask mask

What you do is: static(more secure network, less secure network).  So you can do any of these:

static(dmz,outside) etc.

static(inside,dmz) etc.

static(inside,outside) etc.

If your case you should do: static(inside address, outside address) 100.100.100.100 192.168.10.1 netmask 255.255.255.255

This will NAT the outside address 100.100.100.100 to the inside address 192.168.10.1.

HTH