Global NAT

Answered Question
Nov 20th, 2008

folks

i need to nat ALL outbound traffic for ALL applications to a single IP on my ASAs external interface but i'm not sure which type of nat to use

previously we used a global nat but i suspect i need a static nat rule for the internal interface and use the external interface for outbound translation

am i on the correct track?

thanks to anyone taking the time to reply

I have this problem too.
0 votes
Correct Answer by Jon Marshall about 8 years 1 week ago

Michael

You only need a static if the connection is initiated from the outside to the inside.

If your requirement is simply to NAT all outbound traffic and all outbound traffic is initiated from inside ie. none of the traffic is return traffic from a connection initiated from the outside then

nat (inside) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface

will do the trick.

Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Jon Marshall Thu, 11/20/2008 - 06:21

Michael

You only need a static if the connection is initiated from the outside to the inside.

If your requirement is simply to NAT all outbound traffic and all outbound traffic is initiated from inside ie. none of the traffic is return traffic from a connection initiated from the outside then

nat (inside) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface

will do the trick.

Jon

Actions

This Discussion