×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Global NAT

Answered Question
Nov 20th, 2008
User Badges:

folks


i need to nat ALL outbound traffic for ALL applications to a single IP on my ASAs external interface but i'm not sure which type of nat to use


previously we used a global nat but i suspect i need a static nat rule for the internal interface and use the external interface for outbound translation


am i on the correct track?


thanks to anyone taking the time to reply

Correct Answer by Jon Marshall about 8 years 9 months ago

Michael


You only need a static if the connection is initiated from the outside to the inside.


If your requirement is simply to NAT all outbound traffic and all outbound traffic is initiated from inside ie. none of the traffic is return traffic from a connection initiated from the outside then


nat (inside) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface


will do the trick.


Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Jon Marshall Thu, 11/20/2008 - 06:21
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Michael


You only need a static if the connection is initiated from the outside to the inside.


If your requirement is simply to NAT all outbound traffic and all outbound traffic is initiated from inside ie. none of the traffic is return traffic from a connection initiated from the outside then


nat (inside) 1 0.0.0.0 0.0.0.0

global (outside) 1 interface


will do the trick.


Jon

Actions

This Discussion