nat

[Tahir Sultanov]

Hello,

Just want to understand this syntaxs. How come nating from outside to outside outside to dmz?

nat (outside,DMZ1) source static any any destination static obj-server1 FW11_NAT unidirectional

nat (outside,outside) source static DM_INLINE_NETWORK_34 DM_INLINE_NETWORK_34 destination static DM_INLINE_NETWORK_90 DM_INLINE_NETWORK_90 no-proxy-arp route-lookup

[Dinesh Moudgil · Accepted solution]

Hello Tahir,

The first nat statement is used to allow any source user (from outside) to get translated to itself (nat exemption)  while the destination (on dmz) is translated from obj-server1  to FW11_NAT.


The second nat statement is a nat exemption statement to allow the traffic from DM_INLINE_NETWORK_34 (coming on outside interface) to get self-translated to itself while the destination DM_INLINE_NETWORK_90 (also on outisde interface) is self-translated as well.

The second nat is used when you wish to allow the traffic from one VPN tunnel peer to communicate to another VPN tunnel peer OR allowing traffic from SSL VPN user to communicate to another VPN tunnel peer/SSL VPN user.

Hope this helps.

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.