cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Webcast- Catalyst 9000
119
Views
0
Helpful
1
Replies
Highlighted
Beginner

Pre 8.3 and Post 8.3 NAT

Hello

 

I am Performing a software upgrade on a Cisco ASA running 8.0 to 9.1.

 

I know that the major change is the NAT configuration in this upgrade.

 

In the Pre 8.3 Version, below is the static NAT config. Here any traffic comes on the inside interface with the Source IP address y.y.y.y is translated to x.x.x.x and any traffic comes on the outside interface with the destination IP address x.x.x.x is translated to y.y.y.y

 

static (Inside,Outside) x.x.x.x y.y.y.y netmask 255.255.255.255

 

In the Post 8.3 Version, the above static NAT is translated as below. What I would like to know is does the below configuration performs the same NAT functionality as above?

 

object network OBJ-y.y.y.y
host y.y.y.y
object network OBJ-x.x.x.x
host x.x.x.x
nat (Inside,Outside) source static OBJ-y.y.y.y OBJ-x.x.x.x

 

I mean, Does the traffic coming on the inside interface with the Source IP address y.y.y.y is translated to x.x.x.x and any traffic coming on the outside interface with the destination IP address x.x.x.x is translated to y.y.y.y

1 REPLY 1
VIP Advisor

Re: Pre 8.3 and Post 8.3 NAT

Rav, try this document:

 

https://community.cisco.com/t5/security-documents/asa-pre-8-3-to-8-3-nat-configuration-examples/ta-p/3116375

 

be mindful of object NAT though as it gets processed at the bottom. and ASA;s go top down

Please remember to rate useful posts, by clicking on the stars below.