8.3 "TwiceNat" possible in 8.0.4?

Unanswered Question
May 12th, 2010
User Badges:

Is it possible to get the "twiceNat" feature out of 8.0.4?  Here is the link to 8.3's twice nat.

In short

Asa Inside

Outside-- (filler IP)

DMZ network

DMZ connects to a router that has a,, and a,  Servers.

I would like to do the following if possible

Use my Inside as the primary inside nat.  This nat would map to and IP's in the DMZ that is mapped to,

Trying to keep from having to introduce external subnets into my network. of 8 sites.

The perfect solution, would contact that NATs to would be NAT to

unit is a Asa 5505

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jennifer Halim Wed, 05/12/2010 - 06:34
User Badges:
  • Cisco Employee,

Not supported on any version of ASA to double NAT on the ASA.

Twice NAT on version 8.3 does not mean double NATing, it just means you can NAT both the source and destination at the same time with 1 NAT statement. It does not mean you can NAT the packet twice.

Hope that confirms your question.

Panos Kampanakis Wed, 05/12/2010 - 15:02
User Badges:
  • Cisco Employee,

Not sure if I misunderstood your question, but " NATed to and NATed to" can be done depending on how you want to set it up and between what interfaces.


dmooreami Wed, 05/12/2010 - 15:28
User Badges:

Yes, I understand.

What I wanted to do, was not have to add routes to those 10.10.x.x IP's. 

Just contact a IP that will do a proxy to the 10.10.x.x IP.

Panos Kampanakis Thu, 05/13/2010 - 07:02
User Badges:
  • Cisco Employee,

NAT will do that.

For example if you have

static (inside,outside)

then the ASA will proxy on the outside for And when it sees a packet destined to that ip it will forward it to on the inside.

I hope it makes sense.



This Discussion