NAT on 9.2

[sathish.cco]

Hi,

Anybody can provide the corresponding NAT stmt for version ASA 9.2 ?

static (inside,outside) tcp interface https 10.1.1.2 https dns netmask 255.255.255.255 0 0

Thank you

[Collin Clark · Accepted solution]

object network OBJ-10.1.1.2
 host 10.1.1.2
object service OBJ-TCP-https
 service TCP source eq https
nat (inside,outside) source static OBJ-10.1.1.2 interface service OBJ-TCP-https OBJ-TCP-https dns

There is a very handy tool for conversion at http://www.tunnelsup.com/nat-converter/

[sathish.cco]

Thanks much for letting us know this tool, Its very helpful for me...

But if I remove the "dns" from the config then only its taking,

also the tool is not converting if "dns" is present . is there any way to configure "dns"

nat (yzpat,rzpat) source static OBJ-10.1.1.2 interface service OBJ-TCP-https OBJ
-TCP-https dns
            ^
ERROR: % Invalid input detected at '^' marker.

[Collin Clark]

Instead of the interface keyword, put in your public IP. The DNS keyword should then work.

[sathish.cco]

Could you Please confirm the below conversion is correct. 3 parts
1>
access-list inside_outbound_nat0_acl permit ip 10.2.0.0 255.255.255.0 10.11.1.0 255.255.255.0
access-list inside_outbound_nat0_acl permit ip 10.2.0.0 255.255.255.0 10.6.6.0 255.255.255.0
nat (inside) 0 access-list inside_outbound_nat0_acl
to -- > 9.2
object network SRC1
 subnet 10.2.0.0 255.255.255.0
object network SRC2
 subnet 10.11.0.0 255.255.255.0
 subnet 10.6.6.0 255.255.255.0
 nat (inside,outside) source static SRC1 SRC1 destination static SRC2  SRC2
2>
nat (inside) 10 0.0.0.0 0.0.0.0 0 0
global (outside) 10 interface
TO -- > 9.2
nat (inside,outside) source dynamic any interface
3>
static (inside,outside) tcp interface https SAR2 https dns netmask 255.255.255.255
TO --- 9.2
object network OBJ-10.1.1.2
 host 10.1.1.2
object service OBJ-TCP-https
 service TCP source eq https
nat (inside,outside) source static OBJ-10.1.1.2 interface service OBJ-TCP-https OBJ-TCP-httpS dns

Thank you