nat for asa 5505 v802 to v831

[Eric Arnould]

Hello,

I have a question about the new Nat commande on asa 5505 v 831.

How can I translate this nat commande from asa 5505 v802  in asa 5505 v831 ?

Commande in asa 5505 v802 :

        access-list EURODATA extended permit ip 10.19.3.0 255.255.255.0 10.20.0.0 255.255.0.0
        access-list no_nat extended permit ip 10.19.3.0 255.255.255.0 10.20.0.0 255.255.0.0
        nat (inside) 0 access-list no_nat
        nat (inside) 1 0.0.0.0 0.0.0.0

Thanks by advance for your response...

[manish arora]

I believe it would look something like this :-

8.0.2 :-

access-list no_nat ext per ip 10.19.3.0 255.255.255.0 10.20.0.0 255.255.0.0

Global(outside) 1 interface

nat(inside) 0 access-list no_nat

nat (inside) 1 0.0.0.0 0.0.0.0

8.3.2 :-

object network obj-local

  subnet 10.19.3.0 255.255.255.0

object network obj-remote

   subnet 10.20.0.0 255.255.0.0

nat (inside,outside) 1 source statis obj-local obj-local destination obj-remote obj-remote

object network obj_any

  subnet 0.0.0.0 0.0.0.0

  nat (inside,outside) dynamic interface

I hope i am right   , experts please comment.

thanks

manish

[Eric Arnould]

Yes Manish, I forget the line : Global(outside) 1 interface           

I follow your instructions and it's work fine !

Many thanks Manish for your explications...

[manish arora]

Hi Arnould,

Happy to help . Please Mark the Thread as answered if possible.

Thanks

Manish