nat or no nat

Answered Question
Mar 30th, 2009
User Badges:
  • Purple, 4500 points or more

I have a diagram to help better explain what I'm wondering. I think I'll need to, but maybe not.


My ASA has a private address on the inside interface, and a public address on the outside. Will I need to nat if my device in front is natting for other traffic?


Thanks,

John



Attachment: 
Correct Answer by JamesLuther about 7 years 12 months ago

Hi,


The question would be, does the fatpipe device have routes to your internal network?


If it does then there is no need to NAT on the ASA and you can have all your NAT in one place. If it doesn't have your internal networks in it's routing table then you will need to NAT on the ASA.



Regards

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
JamesLuther Mon, 03/30/2009 - 08:50
User Badges:
  • Silver, 250 points or more

Hi,


The question would be, does the fatpipe device have routes to your internal network?


If it does then there is no need to NAT on the ASA and you can have all your NAT in one place. If it doesn't have your internal networks in it's routing table then you will need to NAT on the ASA.



Regards

John Blakley Mon, 03/30/2009 - 11:23
User Badges:
  • Purple, 4500 points or more

Thanks James! The Fatpipe doesn't have our internal networks set up. It just has an "internal gateway" of my ASA's public address. I'm converting from a Symantec firewall now, and I don't see where it's natting, but I've got nat enabled on the ASA.


Thanks again,


John

Actions

This Discussion