ASA: NAT & Multicast

Unanswered Question
May 25th, 2009

Hi All,

I need to know if the ASA 5580 (version 8.1) supports NAT for Multicast traffic....

Thank you!!


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Kureli Sankar Mon, 05/25/2009 - 16:32

This is new feature in 8.2 code.

Pls. refer this link:

• Multicast group Network Address Translation (NAT): Multicast applications include distance learning, telemedicine, and financial applications. The multicast group NAT feature enables the separation of internal multicast streams from external multicast streams for added security.

aceadmin Thu, 12/10/2009 - 14:30


We are trying to NAT a multicast group through an ASA 5510 running 8.2.1. We have it in routed mode and the group exists on the inside, and we want it to be on the outside. We can NAT the source, but need the group to be translated. Am I correctly understanding that this is a new feature in 8.2.1? If so, can you provide pointers to working configs?

Thank you

Kureli Sankar Thu, 12/10/2009 - 16:00

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-ascii-font-family:Cambria; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:"Times New Roman"; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:Cambria; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;}

static (outside,inside) netmask

What that line does is destination NAT. The packets that arrive on the inside interface destined to will be changed ot on the outside

You need to provide source address translation for your source if you need to.


Oscar Quinonez Fri, 11/14/2014 - 12:22

Is there a feature specification for Multicast group NAT?

I see on your example that one group address is translated to another group address. More specificaly I'm interested on a Multicast group being translated to a unicast address and viceversa?

zheka_pefti Sat, 01/17/2015 - 13:22

Sometimes I'm very annoyed by the way Cisco represents the information about a particular topic. The question was asked about NAT and multicast and the answer is absolutely perfunctory and non-relevant. People asking the question of NAT support of multicast on ASA don't need to know what applications use multicast. Moreover, there's no Cisco guide shedding any word how to configure NAT for multicast. Any documentation about multicast support for ASA software just doesn't mention it. Why does Cisco representative points to the generic article that doesn't bear any technical information other then product bulletin ?


This Discussion