nat for asa 5505 v802 to v831

Unanswered Question
Sep 16th, 2010

Hello,

I have a question about the new Nat commande on asa 5505 v 831.

How can I translate this nat commande from asa 5505 v802  in asa 5505 v831 ?

Commande in asa 5505 v802 :

        access-list EURODATA extended permit ip 10.19.3.0 255.255.255.0 10.20.0.0 255.255.0.0
        access-list no_nat extended permit ip 10.19.3.0 255.255.255.0 10.20.0.0 255.255.0.0
        nat (inside) 0 access-list no_nat
        nat (inside) 1 0.0.0.0 0.0.0.0


Thanks by advance for your response...

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
manish arora Thu, 09/16/2010 - 11:08

I believe it would look something like this :-


8.0.2 :-


access-list no_nat ext per ip 10.19.3.0 255.255.255.0 10.20.0.0 255.255.0.0

Global(outside) 1 interface

nat(inside) 0 access-list no_nat

nat (inside) 1 0.0.0.0 0.0.0.0


8.3.2 :-


object network obj-local

  subnet 10.19.3.0 255.255.255.0

object network obj-remote

   subnet 10.20.0.0 255.255.0.0


nat (inside,outside) 1 source statis obj-local obj-local destination obj-remote obj-remote


object network obj_any

  subnet 0.0.0.0 0.0.0.0

  nat (inside,outside) dynamic interface



I hope i am right   , experts please comment.


thanks

manish

Eric Arnould Mon, 09/20/2010 - 07:07

Yes Manish, I forget the line : Global(outside) 1 interface           

I follow your instructions and it's work fine !


Many thanks Manish for your explications...

manish arora Mon, 09/20/2010 - 08:56

Hi Arnould,

Happy to help . Please Mark the Thread as answered if possible.

Thanks

Manish

Actions

This Discussion